Vuls in server mode since v0.15.14: json schema update ?

[fredericg78]

Hi,
we detected that the json schema has been updated since vuls 0.15.14.
In the cveContents level, the OS sublevel is now an array (it was a dict before), with duplicated datas (see an example below). Is it a new breaking change feature or a defect ? Which informations to expect in this array ?
Thank you, best regards

"cveContents":{
"ubuntu":[
{
"type":"ubuntu",
"cveID":"CVE-2020-12762",
"title":"CVE-2020-12762 on Ubuntu 20.04 (focal) - medium.",
"summary":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.",
"cvss2Score":0,
"cvss2Vector":"",
"cvss2Severity":"Medium",
"cvss3Score":0,
"cvss3Vector":"",
"cvss3Severity":"Medium",
"sourceLink":"",
"references":[
{
"link":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762",
"source":"CVE",
"refID":"CVE-2020-12762"
},
{
"link":"http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-12762.html",
"source":"Ref"
},
{
"link":"https://github.com/json-c/json-c/pull/592",
"source":"Ref"
},
{
"link":"https://ubuntu.com/security/notices/USN-4360-1",
"source":"Ref"
},
{
"link":"https://ubuntu.com/security/notices/USN-4360-4",
"source":"Ref"
},
{
"link":"https://bugs.launchpad.net/ubuntu/+source/json-c/+bug/1878723 (regression)",
"source":"Bug"
},
{
"link":"https://github.com/json-c/json-c/issues/599 (regression)",
"source":"Bug"
}
],
"published":"0001-01-01T00:00:00Z",
"lastModified":"0001-01-01T00:00:00Z"
},
{
"type":"ubuntu",
"cveID":"CVE-2020-12762",
"title":"CVE-2020-12762 on Ubuntu 20.04 (focal) - medium.",
"summary":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.",
"cvss2Score":0,
"cvss2Vector":"",
"cvss2Severity":"Medium",
"cvss3Score":0,
"cvss3Vector":"",
"cvss3Severity":"Medium",
"sourceLink":"http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-12762",
"references":[
{
"link":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762",
"source":"CVE",
"refID":"CVE-2020-12762"
},
{
"link":"http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-12762.html",
"source":"Ref"
},
{
"link":"https://github.com/json-c/json-c/pull/592",
"source":"Ref"
},
{
"link":"https://ubuntu.com/security/notices/USN-4360-1",
"source":"Ref"
},
{
"link":"https://ubuntu.com/security/notices/USN-4360-4",
"source":"Ref"
},
{
"link":"https://bugs.launchpad.net/ubuntu/+source/json-c/+bug/1878723 (regression)",
"source":"Bug"
},
{
"link":"https://github.com/json-c/json-c/issues/599 (regression)",
"source":"Bug"
}
],
"published":"0001-01-01T00:00:00Z",
"lastModified":"0001-01-01T00:00:00Z"
}
]

[MaineK00n]

The JVN data source used by go-cve-dictionary may have multiple data for a single CVE-ID, and to support this, we use the cveContents format as map[string][]CveContent.