VulnerabilityOccurrence constructor

const VulnerabilityOccurrence({
  1. Input<CVSS>? cvssV2,
  2. Input<CVSS>? cvssv3,
  3. Input<VulnerabilityOccurrenceEffectiveSeverity>? effectiveSeverity,
  4. Input<String>? extraDetails,
  5. required Input<List<PackageIssue>> packageIssue,
  6. Input<String>? type,
  7. Input<VexAssessment>? vexAssessment,
})

Creates a new VulnerabilityOccurrence. cvssV2 The cvss v2 score for the vulnerability. cvssv3 The cvss v3 score for the vulnerability. effectiveSeverity The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues. extraDetails Occurrence-specific extra details about the vulnerability. packageIssue The set of affected locations and their fixes (if available) within the associated resource. type The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.). vexAssessment Optional.

Implementation

const VulnerabilityOccurrence({
  this.cvssV2,
  this.cvssv3,
  this.effectiveSeverity,
  this.extraDetails,
  required this.packageIssue,
  this.type,
  this.vexAssessment,
});