{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/jfrog/main/json-schema/jfrog-catalog-vulnerability-schema.json",
  "title": "CatalogVulnerability",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/jfrog-packages-api-openapi.yml#/components/schemas/CatalogVulnerability",
  "type": "object",
  "properties": {
    "cve": {
      "type": "string",
      "description": "CVE identifier"
    },
    "severity": {
      "type": "string",
      "enum": [
        "Low",
        "Medium",
        "High",
        "Critical"
      ]
    },
    "cvss_v3_score": {
      "type": "number"
    },
    "summary": {
      "type": "string"
    },
    "is_transitive": {
      "type": "boolean",
      "description": "Whether this is a transitive vulnerability from a dependency"
    },
    "fixed_versions": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "published": {
      "type": "string",
      "format": "date-time"
    },
    "jfrog_research_severity": {
      "type": "string",
      "description": "JFrog Security Research team severity assessment"
    },
    "jfrog_research_summary": {
      "type": "string",
      "description": "JFrog Security Research enrichment summary"
    }
  }
}