Skip to content

is datePublished possibly ambiguous? #186

@ElectricNroff

Description

@ElectricNroff

"datePublished": {
"$ref": "#/definitions/timestamp",
"description": "The date/time the CVE Record was first published in the CVE List."

and
"datePublished": {
"$ref": "#/definitions/timestamp",
"description": "The date/time the CVE Record was first published in the CVE List."

may have been intended to mean "The date/time the CVE Record was first present in the PUBLISHED state on the CVE List." If so, then these should be clarified.

(The schema is not symmetric. If a CVE Record is currently in the REJECTED state but was previously in the PUBLISHED state, then cveMetadata may have both dateRejected and datePublished. However, if a CVE Record is currently in the PUBLISHED state but was previously in the REJECTED state, then cveMetadata is not allowed to have dateRejected. Historically, it has been less common to make a transition from REJECTED to PUBLISHED.)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions