dependabot-alert-security-vulnerability

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/dependabot-alert-security-vulnerability",
  "title": "dependabot-alert-security-vulnerability",
  "type": "object",
  "description": "Details pertaining to one vulnerable version range for the advisory.",
  "readOnly": true,
  "properties": {
    "package": {
      "$ref": "#/components/schemas/dependabot-alert-package"
    },
    "severity": {
      "type": "string",
      "description": "The severity of the vulnerability.",
      "readOnly": true,
      "enum": [
        "low",
        "medium",
        "high",
        "critical"
      ]
    },
    "vulnerable_version_range": {
      "type": "string",
      "description": "Conditions that identify vulnerable versions of this vulnerability's package.",
      "readOnly": true
    },
    "first_patched_version": {
      "type": "object",
      "description": "Details pertaining to the package version that patches this vulnerability.",
      "readOnly": true,
      "nullable": true,
      "properties": {
        "identifier": {
          "type": "string",
          "description": "The package version that patches this vulnerability.",
          "readOnly": true
        }
      },
      "required": [
        "identifier"
      ],
      "additionalProperties": false
    }
  },
  "required": [
    "package",
    "severity",
    "vulnerable_version_range",
    "first_patched_version"
  ],
  "additionalProperties": false
}