Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Staging from int #1318

Merged
merged 39 commits into from
Jan 8, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
50b038e
updating version to 2.5.0
david-rocca Dec 4, 2024
c477675
Merge pull request #1306 from CVEProject/dr_version_fix_from_master
jdaigneau5 Dec 11, 2024
fdc2c9b
Added tests for erlcheck parameter
david-rocca Dec 18, 2024
571b68f
Fix dead links in swagger, also updated documentation
david-rocca Dec 18, 2024
d08825b
Added erl check functionality
david-rocca Dec 18, 2024
e7983a5
UTC is now enforced on the cve/id endpointss even for secretariat
david-rocca Nov 26, 2024
c8ebc8a
Add converting call to other needed endpoints
david-rocca Nov 26, 2024
4d65984
Fixed liniting test failure
david-rocca Dec 18, 2024
1890bf5
remove testing console.log
david-rocca Dec 18, 2024
2303330
update unit tests to respect the new query parameter
david-rocca Dec 18, 2024
00ce7bf
Added extra checks to protect the cve-id repo from being changed more…
david-rocca Dec 19, 2024
f465b95
Removing no longer valid unit tests. The functions have strayed away …
david-rocca Dec 19, 2024
4cc9502
Linting errors
david-rocca Dec 19, 2024
52ed97c
Apparently, these are used in other tests?
david-rocca Dec 19, 2024
0a6532f
Revert "Removing no longer valid unit tests. The functions have stray…
david-rocca Dec 19, 2024
beb8459
Actually, tests were right, and I was wrong
david-rocca Dec 19, 2024
4efba1a
Merge branch 'dev' into dr_relcheck
david-rocca Dec 20, 2024
5b3889d
Merge branch 'dev' into dr_utc
david-rocca Dec 20, 2024
f160f27
Fixed missing comma, and made docs more detailed
david-rocca Dec 20, 2024
9d92da9
Merge pull request #1307 from CVEProject/dr_relcheck
jdaigneau5 Dec 20, 2024
f8c56cc
Merge branch 'dev' into dr_utc
david-rocca Dec 20, 2024
6901b17
Fix the actual conflict
david-rocca Dec 20, 2024
c646956
Merge pull request #1308 from CVEProject/dr_utc
jdaigneau5 Dec 20, 2024
007d7b9
Merge branch 'dev' into dr-1278
jdaigneau5 Dec 20, 2024
856dcee
Update reservations to allow new year reservations within 90 days
david-rocca Dec 23, 2024
be57c94
added documentation for the rate limiting vars in the .env
david-rocca Dec 26, 2024
d175a77
Javascript do be passing by reference
david-rocca Dec 27, 2024
d4fb734
Merge pull request #1309 from CVEProject/dr-1278
jdaigneau5 Dec 27, 2024
6c85e8d
Merge branch 'dev' into dr-577
jdaigneau5 Dec 27, 2024
51795ec
Merge pull request #1310 from CVEProject/dr-577
jdaigneau5 Dec 27, 2024
2c2cee9
Updated examples to have cvssv4_0
david-rocca Jan 2, 2025
52e37ec
Merge pull request #1313 from CVEProject/dr-1236
jdaigneau5 Jan 6, 2025
6861251
Merge branch 'dev' into dr-1121
jdaigneau5 Jan 6, 2025
5737a45
Merge pull request #1312 from CVEProject/dr-1121
jdaigneau5 Jan 6, 2025
d9838b6
Updating version number to 2.5.1
david-rocca Jan 8, 2025
1712e8b
A few more version numbers
david-rocca Jan 8, 2025
39d02c0
Merge pull request #1316 from CVEProject/dr-version-numbering-2.5.1
jdaigneau5 Jan 8, 2025
078cbdb
Merge branch 'int' into dev
jdaigneau5 Jan 8, 2025
4d688b9
Merge pull request #1317 from CVEProject/dev
jdaigneau5 Jan 8, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions .env
Original file line number Diff line number Diff line change
@@ -1,4 +1,8 @@
PORT = 3000
LOCAL_KEY=TCF25YM-39C4H6D-KA32EGF-V5XSHN3
# The duration of the rate limiting window in seconds.
# This defines the time frame for which the rate limit is applied.
RATE_LIMIT_WINDOW_SECONDS=60
# The maximum number of connections allowed within the rate limiting window.
# This sets the threshold for how many requests can be made in the specified time frame.
RATE_LIMIT_MAX_CONNECTIONS=1000
291 changes: 288 additions & 3 deletions api-docs/openapi.json

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"name": "cve-services",
"author": "Automation Working Group",
"version": "2.3.1",
"version": "2.5.1",
"license": "(CC0)",
"devDependencies": {
"@faker-js/faker": "^7.6.0",
Expand Down
274 changes: 273 additions & 1 deletion schemas/cve/create-adp-record-adp-request.json
Original file line number Diff line number Diff line change
Expand Up @@ -581,6 +581,11 @@
"items": {
"type": "object",
"anyOf": [
{
"required": [
"cvssV4_0"
]
},
{
"required": [
"cvssV3_1"
Expand Down Expand Up @@ -626,6 +631,271 @@
]
}
},
"cvssV4_0": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"allOf": [
{
"properties": {
"baseScore": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType"
},
"baseSeverity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType"
}
}
},
{
"properties": {
"threatScore": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType"
},
"threatSeverity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType"
}
}
},
{
"properties": {
"environmentalScore": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType"
},
"environmentalSeverity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType"
}
}
}
],
"definitions": {
"attackComplexityType": {
"type": "string"
},
"attackRequirementsType": {
"type": "string"
},
"attackVectorType": {
"type": "string"
},
"automatableType": {
"type": "string"
},
"ciaRequirementType": {
"type": "string"
},
"criticalScoreType": {
"type": "number"
},
"criticalSeverityType": {
"const": "string"
},
"exploitMaturityType": {
"type": "string"
},
"highScoreType": {
"type": "number"
},
"highSeverityType": {
"type": "string"
},
"lowScoreType": {
"type": "number"
},
"lowSeverityType": {
"type": "string"
},
"mediumScoreType": {
"type": "number"
},
"mediumSeverityType": {
"const": "string"
},
"modifiedAttackComplexityType": {
"type": "string"
},
"modifiedAttackRequirementsType": {
"type": "string"
},
"modifiedAttackVectorType": {
"type": "string"
},
"modifiedPrivilegesRequiredType": {
"type": "string"
},
"modifiedSubCType": {
"type": "string"
},
"modifiedSubIaType": {
"type": "string"
},
"modifiedUserInteractionType": {
"type": "string"
},
"modifiedVulnCiaType": {
"type": "string"
},
"noneScoreType": {
"type": "number"
},
"noneSeverityType": {
"const": "string"
},
"privilegesRequiredType": {
"type": "string"
},
"providerUrgencyType": {
"type": "string"
},
"recoveryType": {
"type": "string"
},
"safetyType": {
"type": "string"
},
"scoreType": {
"type": "number"
},
"severityType": {
"type": "string"
},
"subCiaType": {
"type": "string"
},
"userInteractionType": {
"type": "string"
},
"valueDensityType": {
"type": "string"
},
"vulnCiaType": {
"type": "string"
},
"vulnerabilityResponseEffortType": {
"type": "string"
}
},
"properties": {
"Automatable": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/automatableType"
},
"Recovery": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/recoveryType"
},
"Safety": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/safetyType"
},
"attackComplexity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackComplexityType"
},
"attackRequirements": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackRequirementsType"
},
"attackVector": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackVectorType"
},
"availabilityRequirement": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType"
},
"baseScore": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/scoreType"
},
"baseSeverity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/severityType"
},
"confidentialityRequirement": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType"
},
"exploitMaturity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/exploitMaturityType"
},
"integrityRequirement": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType"
},
"modifiedAttackComplexity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackComplexityType"
},
"modifiedAttackRequirements": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackRequirementsType"
},
"modifiedAttackVector": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackVectorType"
},
"modifiedPrivilegesRequired": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedPrivilegesRequiredType"
},
"modifiedSubAvailabilityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubIaType"
},
"modifiedSubConfidentialityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubCType"
},
"modifiedSubIntegrityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubIaType"
},
"modifiedUserInteraction": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedUserInteractionType"
},
"modifiedVulnAvailabilityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType"
},
"modifiedVulnConfidentialityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType"
},
"modifiedVulnIntegrityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType"
},
"privilegesRequired": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/privilegesRequiredType"
},
"providerUrgency": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/providerUrgencyType"
},
"subAvailabilityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType"
},
"subConfidentialityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType"
},
"subIntegrityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType"
},
"userInteraction": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/userInteractionType"
},
"valueDensity": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/valueDensityType"
},
"vectorString": {
"type": "string"
},
"version": {
"description": "CVSS Version",
"enum": [
"4.0"
],
"type": "string"
},
"vulnAvailabilityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType"
},
"vulnConfidentialityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType"
},
"vulnIntegrityImpact": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType"
},
"vulnerabilityResponseEffort": {
"$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnerabilityResponseEffortType"
}
},
"required": [
"version",
"vectorString",
"baseScore",
"baseSeverity"
],
"title": "JSON Schema for Common Vulnerability Scoring System version 4.0",
"type": "object"
},
"cvssV3_1": {
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
Expand Down Expand Up @@ -1315,7 +1585,9 @@
"additionalProperties": false
}
},
"required":["adpContainer"],
"required": [
"adpContainer"
],
"properties": {
"adpContainer": {
"$ref": "#/definitions/adpContainer"
Expand Down
Loading
Loading