{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Vulnerability",
  "description": "Vulnerability schema from Palo Alto Networks Prisma Cloud Compute API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/prisma-cloud-compute-api-vulnerability-schema.json",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "CVE identifier (e.g., CVE-2024-1234)."
    },
    "status": {
      "type": "string",
      "enum": [
        "fixed in",
        "needed",
        "will not fix",
        "deferred"
      ],
      "description": "Fix availability status."
    },
    "cvss": {
      "type": "number",
      "format": "float",
      "description": "CVSS v3 base score."
    },
    "severity": {
      "type": "string",
      "enum": [
        "critical",
        "high",
        "medium",
        "low"
      ],
      "description": "Severity level derived from CVSS score."
    },
    "packageName": {
      "type": "string",
      "description": "Name of the affected package."
    },
    "packageVersion": {
      "type": "string",
      "description": "Installed version of the affected package."
    },
    "fixedVersion": {
      "type": "string",
      "description": "Version that contains the fix, if available."
    },
    "link": {
      "type": "string",
      "description": "URL to the CVE advisory or details page."
    },
    "description": {
      "type": "string",
      "description": "Brief description of the vulnerability."
    },
    "publishedDate": {
      "type": "string",
      "format": "date-time",
      "description": "Date the vulnerability was publicly disclosed."
    }
  }
}