types.VulnImpactedResources

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/main/json-schema/palo-alto-networks-types-vuln-impacted-resources-schema.json",
  "title": "types.VulnImpactedResources",
  "description": "VulnImpactedResources holds details about the resources impacted by vulnerability",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/palo-alto-networks-stats-api-openapi.yml#/components/schemas/types.VulnImpactedResources",
  "properties": {
    "_id": {
      "description": "ID is the CVE ID (index for the impacted resources).\n",
      "type": "string"
    },
    "functions": {
      "description": "Functions is a map between function id to its details.\n",
      "items": {
        "$ref": "#/$defs/types.ImpactedResourceDetails"
      },
      "type": "array"
    },
    "functionsCount": {
      "description": "FunctionsCount is the total impacted functions count.\n",
      "type": "integer"
    },
    "hosts": {
      "description": "Hosts is the list of impacted hosts.\n",
      "items": {
        "$ref": "#/$defs/types.ImpactedResourceDetails"
      },
      "type": "array"
    },
    "hostsCount": {
      "description": "HostsCount is the total impacted hosts count.\n",
      "type": "integer"
    },
    "images": {
      "description": "Images is the list of impacted hosts.\n",
      "items": {
        "$ref": "#/$defs/types.ImpactedResourceDetails"
      },
      "type": "array"
    },
    "imagesCount": {
      "description": "ImagesCount is the total impacted images count.\n",
      "type": "integer"
    },
    "registryImages": {
      "description": "RegistryImages is a list of impacted registry images.\n",
      "items": {
        "$ref": "#/$defs/types.ImpactedResourceDetails"
      },
      "type": "array"
    },
    "registryImagesCount": {
      "description": "RegistryImagesCount is the total impacted registry images count.\n",
      "type": "integer"
    }
  },
  "type": "object",
  "$defs": {
    "types.ImpactedContainer": {
      "description": "ImpactedContainer contains details of a running container with an impacted image",
      "properties": {
        "container": {
          "description": ".\n",
          "type": "string"
        },
        "factors": {
          "$ref": "#/$defs/types.RiskScoreFactors"
        },
        "host": {
          "description": ".\n",
          "type": "string"
        },
        "image": {
          "description": ".\n",
          "type": "string"
        },
        "imageID": {
          "description": ".\n",
          "type": "string"
        },
        "namespace": {
          "description": ".\n",
          "type": "string"
        }
      },
      "type": "object"
    },
    "types.ImpactedPackage": {
      "description": "ImpactedPackage holds the vulnerability details for a package",
      "properties": {
        "cvss": {
          "description": "CVSS is the vulnerability cvss score for this package.\n",
          "format": "float",
          "type": "number"
        },
        "package": {
          "description": "Package is the impacted package name and version.\n",
          "type": "string"
        },
        "severity": {
          "description": "Severity is the vulnerability severity for this package.\n",
          "type": "string"
        }
      },
      "type": "object"
    },
    "types.ImpactedResourceDetails": {
      "description": "ImpactedResourceDetails holds the vulnerability details for a specific impacted resource",
      "properties": {
        "containers": {
          "description": "Containers are the running containers of this image found in the environment.\n",
          "items": {
            "$ref": "#/$defs/types.ImpactedContainer"
          },
          "type": "array"
        },
        "functionDetails": {
          "description": "FunctionDetails is a formatted string holding function details.\n",
          "type": "string"
        },
        "packages": {
          "description": "Packages holds vulnerability details per impacted package found in this resource.\n",
          "items": {
            "$ref": "#/$defs/types.ImpactedPackage"
          },
          "type": "array"
        },
        "resourceID": {
          "description": "ResourceID is a resource identifier (e.g. image ID, hostname).\n",
          "type": "string"
        }
      },
      "type": "object"
    },
    "types.RiskScoreFactors": {
      "description": "RiskScoreFactors holds factors used to calculate risk score",
      "properties": {
        "envVarSecrets": {
          "description": "EnvVarSecrets indicates whether a container has access to secrets via environment variables.\n",
          "type": "boolean"
        },
        "hostAccess": {
          "description": "HostAccess indicates whether a container has access to the host network or namespace.\n",
          "type": "boolean"
        },
        "internet": {
          "description": "Internet indicates whether a container has internet access.\n",
          "type": "boolean"
        },
        "network": {
          "description": "Network indicates whether a container is listening to ports.\n",
          "type": "boolean"
        },
        "noSecurityProfile": {
          "description": "NoSecurityProfile indicates whether a container has security profile issue.\n",
          "type": "boolean"
        },
        "privilegedContainer": {
          "description": "PrivilegedContainer indicates whether a container runs using the --privileged flag.\n",
          "type": "boolean"
        },
        "rootMount": {
          "description": "RootMount indicates whether a container has access to the host file system using a root mount.\n",
          "type": "boolean"
        },
        "rootPrivilege": {
          "description": "RootPrivilege indicates whether a container runs as root.\n",
          "type": "boolean"
        },
        "runtimeSocket": {
          "description": "RuntimeSocket indicates whether a container has the runtime socket mounted.\n",
          "type": "boolean"
        }
      },
      "type": "object"
    }
  }
}