@oomol-lab/open-connector 1.6.3 → 1.6.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/assets/open-connector/catalog/apps/aisa.json +568 -0
- package/assets/open-connector/catalog/apps/bilibili.json +2586 -0
- package/assets/open-connector/catalog/apps/bitwarden.json +1423 -0
- package/assets/open-connector/catalog/apps/cronfree.json +303 -0
- package/assets/open-connector/catalog/apps/cufinder.json +368 -0
- package/assets/open-connector/catalog/apps/feishu_app_bot.json +2 -2
- package/assets/open-connector/catalog/apps/gmail.json +73 -0
- package/assets/open-connector/catalog/apps/investoday_mcp.json +22228 -197
- package/assets/open-connector/catalog/apps/ixspy.json +2274 -0
- package/assets/open-connector/catalog/apps/jin10.json +1 -1
- package/assets/open-connector/catalog/apps/osv.json +663 -0
- package/assets/open-connector/catalog/apps/pdf_vector.json +329 -0
- package/assets/open-connector/catalog/apps/pulsetic.json +406 -0
- package/assets/open-connector/catalog/apps/shopee.json +1785 -0
- package/assets/open-connector/catalog/apps/slack.json +81 -0
- package/assets/open-connector/catalog/apps/slackbot.json +81 -0
- package/assets/open-connector/catalog/apps/speak_ai.json +360 -0
- package/assets/open-connector/catalog/apps/tongdaxin.json +11 -440
- package/assets/open-connector/catalog/apps/zyhub.json +1585 -0
- package/assets/open-connector/catalog/apps-index.json +1 -1
- package/package.json +1 -1
- package/src/core/json-schema.d.ts +5 -1
- package/src/core/json-schema.js +14 -2
- package/src/core/types.d.ts +9 -0
- package/src/oauth/oauth-credential-refresh-service.js +3 -1
- package/src/oauth/oauth-flow-service.js +17 -2
- package/src/oauth/oauth-token.d.ts +13 -0
- package/src/providers/action-contracts.generated.d.ts +16 -4
- package/src/providers/aisa/executors.d.ts +4 -0
- package/src/providers/aisa/executors.js +176 -0
- package/src/providers/bilibili/articles.d.ts +3 -0
- package/src/providers/bilibili/articles.js +369 -0
- package/src/providers/bilibili/executors.d.ts +8 -0
- package/src/providers/bilibili/executors.js +262 -0
- package/src/providers/bilibili/runtime.d.ts +95 -0
- package/src/providers/bilibili/runtime.js +238 -0
- package/src/providers/bilibili/upload.d.ts +14 -0
- package/src/providers/bilibili/upload.js +105 -0
- package/src/providers/bitwarden/executors.d.ts +3 -0
- package/src/providers/bitwarden/executors.js +146 -0
- package/src/providers/cronfree/executors.d.ts +4 -0
- package/src/providers/cronfree/executors.js +89 -0
- package/src/providers/cufinder/executors.d.ts +4 -0
- package/src/providers/cufinder/executors.js +105 -0
- package/src/providers/dropbox/executors.js +21 -3
- package/src/providers/elevenreader/runtime.js +6 -5
- package/src/providers/feishu_app_bot/scopes.js +1 -1
- package/src/providers/gmail/attachment-stream.d.ts +2 -0
- package/src/providers/gmail/attachment-stream.js +162 -0
- package/src/providers/gmail/executors.d.ts +3 -1
- package/src/providers/gmail/executors.js +53 -25
- package/src/providers/investoday_mcp/official-actions.js +19 -372
- package/src/providers/investoday_mcp/official-tool-types.d.ts +10 -0
- package/src/providers/investoday_mcp/official-tool-types.js +4 -0
- package/src/providers/investoday_mcp/official-tools/charts.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/charts.js +32 -0
- package/src/providers/investoday_mcp/official-tools/fixed-income.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/fixed-income.js +326 -0
- package/src/providers/investoday_mcp/official-tools/funds.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/funds.js +1085 -0
- package/src/providers/investoday_mcp/official-tools/hong-kong.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/hong-kong.js +275 -0
- package/src/providers/investoday_mcp/official-tools/indices-industries.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/indices-industries.js +642 -0
- package/src/providers/investoday_mcp/official-tools/macro-calendar.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/macro-calendar.js +398 -0
- package/src/providers/investoday_mcp/official-tools/other.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/other.js +131 -0
- package/src/providers/investoday_mcp/official-tools/research-news.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/research-news.js +302 -0
- package/src/providers/investoday_mcp/official-tools/stocks.d.ts +2 -0
- package/src/providers/investoday_mcp/official-tools/stocks.js +2829 -0
- package/src/providers/ixspy/executors.d.ts +3 -0
- package/src/providers/ixspy/executors.js +220 -0
- package/src/providers/mcp-client.d.ts +1 -0
- package/src/providers/mcp-client.js +41 -27
- package/src/providers/osv/executors.d.ts +2 -0
- package/src/providers/osv/executors.js +11 -0
- package/src/providers/osv/runtime.d.ts +9 -0
- package/src/providers/osv/runtime.js +66 -0
- package/src/providers/pdf_vector/executors.d.ts +4 -0
- package/src/providers/pdf_vector/executors.js +108 -0
- package/src/providers/provider-runtime.d.ts +3 -0
- package/src/providers/provider-runtime.js +4 -1
- package/src/providers/pulsetic/executors.d.ts +4 -0
- package/src/providers/pulsetic/executors.js +126 -0
- package/src/providers/registry.generated.js +12 -0
- package/src/providers/sellersprite_mcp/executors.js +2 -1
- package/src/providers/shopee/actions.d.ts +2 -0
- package/src/providers/shopee/actions.js +474 -0
- package/src/providers/shopee/executors.d.ts +3 -0
- package/src/providers/shopee/executors.js +85 -0
- package/src/providers/shopee/runtime.d.ts +79 -0
- package/src/providers/shopee/runtime.js +693 -0
- package/src/providers/slack/actions.js +17 -0
- package/src/providers/slack/runtime.js +62 -4
- package/src/providers/speak_ai/executors.d.ts +3 -0
- package/src/providers/speak_ai/executors.js +187 -0
- package/src/providers/tongdaxin/executors.js +5 -4
- package/src/providers/tongdaxin/named-action-output.js +3 -9
- package/src/providers/tongdaxin/named-action-routing.js +1 -1
- package/src/providers/tongdaxin/named-actions.js +1 -6
- package/src/providers/tushare/runtime.js +22 -9
- package/src/providers/twenty_crm/runtime.js +4 -2
- package/src/providers/zyhub/executors.d.ts +3 -0
- package/src/providers/zyhub/executors.js +240 -0
- package/src/server/files/transit-files.d.ts +3 -2
- package/src/server/files/transit-files.js +31 -35
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"type": "api_key",
|
|
14
14
|
"label": "API Key",
|
|
15
15
|
"placeholder": "sk-...",
|
|
16
|
-
"description": "Jin10 MCP API key used as a Bearer token for https://mcp.jin10.com/mcp.
|
|
16
|
+
"description": "Jin10 MCP API key used as a Bearer token for https://mcp.jin10.com/mcp. Sign in, activate, and copy your MCP Token from the Jin10 Intelligent Open Platform: https://mcp.jin10.com/app/."
|
|
17
17
|
}
|
|
18
18
|
],
|
|
19
19
|
"homepageUrl": "https://www.jin10.com",
|
|
@@ -0,0 +1,663 @@
|
|
|
1
|
+
{
|
|
2
|
+
"service": "osv",
|
|
3
|
+
"displayName": "OSV",
|
|
4
|
+
"description": "Query known vulnerabilities in open source packages and retrieve OSV advisory records.",
|
|
5
|
+
"categories": [
|
|
6
|
+
"Security",
|
|
7
|
+
"Developer Tools"
|
|
8
|
+
],
|
|
9
|
+
"authTypes": [
|
|
10
|
+
"no_auth"
|
|
11
|
+
],
|
|
12
|
+
"auth": [
|
|
13
|
+
{
|
|
14
|
+
"type": "no_auth"
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"homepageUrl": "https://osv.dev",
|
|
18
|
+
"actions": [
|
|
19
|
+
{
|
|
20
|
+
"id": "osv.get_vulnerability",
|
|
21
|
+
"service": "osv",
|
|
22
|
+
"name": "get_vulnerability",
|
|
23
|
+
"description": "Get the complete OSV record for a vulnerability identifier.",
|
|
24
|
+
"operationType": "read",
|
|
25
|
+
"requiredScopes": [],
|
|
26
|
+
"providerPermissions": [],
|
|
27
|
+
"inputSchema": {
|
|
28
|
+
"type": "object",
|
|
29
|
+
"properties": {
|
|
30
|
+
"id": {
|
|
31
|
+
"type": "string",
|
|
32
|
+
"minLength": 1,
|
|
33
|
+
"description": "The case-sensitive OSV vulnerability identifier, such as GHSA-vp9c-fpxx-744v."
|
|
34
|
+
}
|
|
35
|
+
},
|
|
36
|
+
"additionalProperties": false,
|
|
37
|
+
"description": "Vulnerability lookup input."
|
|
38
|
+
},
|
|
39
|
+
"outputSchema": {
|
|
40
|
+
"type": "object",
|
|
41
|
+
"properties": {
|
|
42
|
+
"schema_version": {
|
|
43
|
+
"type": "string",
|
|
44
|
+
"description": "The OSV schema version used by this record."
|
|
45
|
+
},
|
|
46
|
+
"id": {
|
|
47
|
+
"type": "string",
|
|
48
|
+
"minLength": 1,
|
|
49
|
+
"description": "The vulnerability identifier."
|
|
50
|
+
},
|
|
51
|
+
"modified": {
|
|
52
|
+
"type": "string",
|
|
53
|
+
"description": "When the record was last modified.",
|
|
54
|
+
"format": "date-time"
|
|
55
|
+
},
|
|
56
|
+
"published": {
|
|
57
|
+
"type": "string",
|
|
58
|
+
"description": "When the vulnerability was published.",
|
|
59
|
+
"format": "date-time"
|
|
60
|
+
},
|
|
61
|
+
"withdrawn": {
|
|
62
|
+
"type": "string",
|
|
63
|
+
"description": "When the record was withdrawn.",
|
|
64
|
+
"format": "date-time"
|
|
65
|
+
},
|
|
66
|
+
"aliases": {
|
|
67
|
+
"type": "array",
|
|
68
|
+
"items": {
|
|
69
|
+
"type": "string",
|
|
70
|
+
"description": "An alternative identifier."
|
|
71
|
+
},
|
|
72
|
+
"description": "Alternative vulnerability identifiers."
|
|
73
|
+
},
|
|
74
|
+
"related": {
|
|
75
|
+
"type": "array",
|
|
76
|
+
"items": {
|
|
77
|
+
"type": "string",
|
|
78
|
+
"description": "A related identifier."
|
|
79
|
+
},
|
|
80
|
+
"description": "Related vulnerability identifiers."
|
|
81
|
+
},
|
|
82
|
+
"upstream": {
|
|
83
|
+
"type": "array",
|
|
84
|
+
"items": {
|
|
85
|
+
"type": "string",
|
|
86
|
+
"description": "An upstream identifier."
|
|
87
|
+
},
|
|
88
|
+
"description": "Upstream vulnerability identifiers."
|
|
89
|
+
},
|
|
90
|
+
"summary": {
|
|
91
|
+
"type": "string",
|
|
92
|
+
"description": "A short vulnerability summary."
|
|
93
|
+
},
|
|
94
|
+
"details": {
|
|
95
|
+
"type": "string",
|
|
96
|
+
"description": "The detailed vulnerability description."
|
|
97
|
+
},
|
|
98
|
+
"severity": {
|
|
99
|
+
"type": "array",
|
|
100
|
+
"items": {
|
|
101
|
+
"type": "object",
|
|
102
|
+
"properties": {
|
|
103
|
+
"type": {
|
|
104
|
+
"type": "string",
|
|
105
|
+
"minLength": 1,
|
|
106
|
+
"description": "The scoring system, such as CVSS_V3 or CVSS_V4."
|
|
107
|
+
},
|
|
108
|
+
"score": {
|
|
109
|
+
"type": "string",
|
|
110
|
+
"minLength": 1,
|
|
111
|
+
"description": "The severity score or vector encoded for the scoring system."
|
|
112
|
+
}
|
|
113
|
+
},
|
|
114
|
+
"additionalProperties": true,
|
|
115
|
+
"required": [
|
|
116
|
+
"type",
|
|
117
|
+
"score"
|
|
118
|
+
],
|
|
119
|
+
"description": "A severity score encoded with a named scoring system."
|
|
120
|
+
},
|
|
121
|
+
"description": "Severity scores for the vulnerability."
|
|
122
|
+
},
|
|
123
|
+
"affected": {
|
|
124
|
+
"type": "array",
|
|
125
|
+
"items": {
|
|
126
|
+
"type": "object",
|
|
127
|
+
"properties": {
|
|
128
|
+
"package": {
|
|
129
|
+
"type": "object",
|
|
130
|
+
"properties": {
|
|
131
|
+
"name": {
|
|
132
|
+
"type": "string",
|
|
133
|
+
"minLength": 1,
|
|
134
|
+
"description": "The package name as used by its ecosystem."
|
|
135
|
+
},
|
|
136
|
+
"ecosystem": {
|
|
137
|
+
"type": "string",
|
|
138
|
+
"minLength": 1,
|
|
139
|
+
"description": "The case-sensitive OSV ecosystem name, such as npm, PyPI, Go, or Maven."
|
|
140
|
+
},
|
|
141
|
+
"purl": {
|
|
142
|
+
"type": "string",
|
|
143
|
+
"minLength": 1,
|
|
144
|
+
"description": "The package URL assigned by OSV, when available."
|
|
145
|
+
}
|
|
146
|
+
},
|
|
147
|
+
"additionalProperties": true,
|
|
148
|
+
"required": [
|
|
149
|
+
"name",
|
|
150
|
+
"ecosystem"
|
|
151
|
+
],
|
|
152
|
+
"description": "A package identified by its ecosystem and name."
|
|
153
|
+
},
|
|
154
|
+
"severity": {
|
|
155
|
+
"type": "array",
|
|
156
|
+
"items": {
|
|
157
|
+
"type": "object",
|
|
158
|
+
"properties": {
|
|
159
|
+
"type": {
|
|
160
|
+
"type": "string",
|
|
161
|
+
"minLength": 1,
|
|
162
|
+
"description": "The scoring system, such as CVSS_V3 or CVSS_V4."
|
|
163
|
+
},
|
|
164
|
+
"score": {
|
|
165
|
+
"type": "string",
|
|
166
|
+
"minLength": 1,
|
|
167
|
+
"description": "The severity score or vector encoded for the scoring system."
|
|
168
|
+
}
|
|
169
|
+
},
|
|
170
|
+
"additionalProperties": true,
|
|
171
|
+
"required": [
|
|
172
|
+
"type",
|
|
173
|
+
"score"
|
|
174
|
+
],
|
|
175
|
+
"description": "A severity score encoded with a named scoring system."
|
|
176
|
+
},
|
|
177
|
+
"description": "Package-specific severity scores."
|
|
178
|
+
},
|
|
179
|
+
"ranges": {
|
|
180
|
+
"type": "array",
|
|
181
|
+
"items": {
|
|
182
|
+
"type": "object",
|
|
183
|
+
"properties": {
|
|
184
|
+
"type": {
|
|
185
|
+
"type": "string",
|
|
186
|
+
"minLength": 1,
|
|
187
|
+
"description": "The range type, such as SEMVER, ECOSYSTEM, or GIT."
|
|
188
|
+
},
|
|
189
|
+
"repo": {
|
|
190
|
+
"type": "string",
|
|
191
|
+
"description": "The source repository for a GIT range.",
|
|
192
|
+
"format": "uri"
|
|
193
|
+
},
|
|
194
|
+
"events": {
|
|
195
|
+
"type": "array",
|
|
196
|
+
"items": {
|
|
197
|
+
"type": "object",
|
|
198
|
+
"properties": {
|
|
199
|
+
"introduced": {
|
|
200
|
+
"type": "string",
|
|
201
|
+
"description": "The version or commit where the affected range begins."
|
|
202
|
+
},
|
|
203
|
+
"fixed": {
|
|
204
|
+
"type": "string",
|
|
205
|
+
"description": "The version or commit where the affected range ends."
|
|
206
|
+
},
|
|
207
|
+
"last_affected": {
|
|
208
|
+
"type": "string",
|
|
209
|
+
"description": "The last known affected version or commit."
|
|
210
|
+
},
|
|
211
|
+
"limit": {
|
|
212
|
+
"type": "string",
|
|
213
|
+
"description": "The first version or commit outside the affected range."
|
|
214
|
+
}
|
|
215
|
+
},
|
|
216
|
+
"additionalProperties": true,
|
|
217
|
+
"description": "A version or commit event delimiting an affected range."
|
|
218
|
+
},
|
|
219
|
+
"description": "Ordered events delimiting the affected range."
|
|
220
|
+
}
|
|
221
|
+
},
|
|
222
|
+
"additionalProperties": true,
|
|
223
|
+
"required": [
|
|
224
|
+
"type",
|
|
225
|
+
"events"
|
|
226
|
+
],
|
|
227
|
+
"description": "A version or commit range affected by the vulnerability."
|
|
228
|
+
},
|
|
229
|
+
"description": "Affected version or commit ranges."
|
|
230
|
+
},
|
|
231
|
+
"versions": {
|
|
232
|
+
"type": "array",
|
|
233
|
+
"items": {
|
|
234
|
+
"type": "string",
|
|
235
|
+
"description": "An affected package version."
|
|
236
|
+
},
|
|
237
|
+
"description": "Known affected versions."
|
|
238
|
+
},
|
|
239
|
+
"ecosystem_specific": {
|
|
240
|
+
"description": "Additional data defined by the package ecosystem."
|
|
241
|
+
},
|
|
242
|
+
"database_specific": {
|
|
243
|
+
"description": "Additional data defined by the source vulnerability database."
|
|
244
|
+
}
|
|
245
|
+
},
|
|
246
|
+
"additionalProperties": true,
|
|
247
|
+
"required": [
|
|
248
|
+
"package"
|
|
249
|
+
],
|
|
250
|
+
"description": "One package affected by the vulnerability."
|
|
251
|
+
},
|
|
252
|
+
"description": "Packages affected by the vulnerability."
|
|
253
|
+
},
|
|
254
|
+
"references": {
|
|
255
|
+
"type": "array",
|
|
256
|
+
"items": {
|
|
257
|
+
"type": "object",
|
|
258
|
+
"properties": {
|
|
259
|
+
"type": {
|
|
260
|
+
"type": "string",
|
|
261
|
+
"minLength": 1,
|
|
262
|
+
"description": "The OSV reference type, such as ADVISORY, REPORT, or WEB."
|
|
263
|
+
},
|
|
264
|
+
"url": {
|
|
265
|
+
"type": "string",
|
|
266
|
+
"description": "The referenced resource URL.",
|
|
267
|
+
"format": "uri"
|
|
268
|
+
}
|
|
269
|
+
},
|
|
270
|
+
"additionalProperties": true,
|
|
271
|
+
"required": [
|
|
272
|
+
"type",
|
|
273
|
+
"url"
|
|
274
|
+
],
|
|
275
|
+
"description": "A reference associated with the vulnerability."
|
|
276
|
+
},
|
|
277
|
+
"description": "References associated with the vulnerability."
|
|
278
|
+
},
|
|
279
|
+
"credits": {
|
|
280
|
+
"type": "array",
|
|
281
|
+
"items": {
|
|
282
|
+
"type": "object",
|
|
283
|
+
"properties": {
|
|
284
|
+
"name": {
|
|
285
|
+
"type": "string",
|
|
286
|
+
"minLength": 1,
|
|
287
|
+
"description": "The credited person or organization."
|
|
288
|
+
},
|
|
289
|
+
"contact": {
|
|
290
|
+
"type": "array",
|
|
291
|
+
"items": {
|
|
292
|
+
"type": "string",
|
|
293
|
+
"description": "A contact identifier."
|
|
294
|
+
},
|
|
295
|
+
"description": "Contact identifiers for the credited party."
|
|
296
|
+
},
|
|
297
|
+
"type": {
|
|
298
|
+
"type": "string",
|
|
299
|
+
"description": "The credit role defined by the OSV schema."
|
|
300
|
+
}
|
|
301
|
+
},
|
|
302
|
+
"additionalProperties": true,
|
|
303
|
+
"required": [
|
|
304
|
+
"name"
|
|
305
|
+
],
|
|
306
|
+
"description": "Credit for discovering, reporting, or remediating the vulnerability."
|
|
307
|
+
},
|
|
308
|
+
"description": "Credits associated with the vulnerability."
|
|
309
|
+
},
|
|
310
|
+
"database_specific": {
|
|
311
|
+
"description": "Additional data defined by the source vulnerability database."
|
|
312
|
+
}
|
|
313
|
+
},
|
|
314
|
+
"additionalProperties": true,
|
|
315
|
+
"required": [
|
|
316
|
+
"id",
|
|
317
|
+
"modified"
|
|
318
|
+
],
|
|
319
|
+
"description": "An OSV vulnerability record."
|
|
320
|
+
}
|
|
321
|
+
},
|
|
322
|
+
{
|
|
323
|
+
"id": "osv.query_vulnerabilities",
|
|
324
|
+
"service": "osv",
|
|
325
|
+
"name": "query_vulnerabilities",
|
|
326
|
+
"description": "Find known vulnerabilities associated with a package or affecting a specific package version.",
|
|
327
|
+
"operationType": "read",
|
|
328
|
+
"requiredScopes": [],
|
|
329
|
+
"providerPermissions": [],
|
|
330
|
+
"inputSchema": {
|
|
331
|
+
"type": "object",
|
|
332
|
+
"properties": {
|
|
333
|
+
"ecosystem": {
|
|
334
|
+
"type": "string",
|
|
335
|
+
"minLength": 1,
|
|
336
|
+
"description": "The case-sensitive OSV ecosystem name, such as npm, PyPI, Go, or Maven."
|
|
337
|
+
},
|
|
338
|
+
"package": {
|
|
339
|
+
"type": "string",
|
|
340
|
+
"minLength": 1,
|
|
341
|
+
"description": "The package name as used by its ecosystem."
|
|
342
|
+
},
|
|
343
|
+
"version": {
|
|
344
|
+
"type": "string",
|
|
345
|
+
"minLength": 1,
|
|
346
|
+
"description": "The package version to check. Omit it to return vulnerabilities across all versions."
|
|
347
|
+
},
|
|
348
|
+
"pageToken": {
|
|
349
|
+
"type": "string",
|
|
350
|
+
"minLength": 1,
|
|
351
|
+
"description": "The continuation token returned by a previous query."
|
|
352
|
+
}
|
|
353
|
+
},
|
|
354
|
+
"additionalProperties": false,
|
|
355
|
+
"required": [
|
|
356
|
+
"ecosystem",
|
|
357
|
+
"package"
|
|
358
|
+
],
|
|
359
|
+
"description": "Package vulnerability query."
|
|
360
|
+
},
|
|
361
|
+
"outputSchema": {
|
|
362
|
+
"type": "object",
|
|
363
|
+
"properties": {
|
|
364
|
+
"vulnerabilities": {
|
|
365
|
+
"type": "array",
|
|
366
|
+
"items": {
|
|
367
|
+
"type": "object",
|
|
368
|
+
"properties": {
|
|
369
|
+
"schema_version": {
|
|
370
|
+
"type": "string",
|
|
371
|
+
"description": "The OSV schema version used by this record."
|
|
372
|
+
},
|
|
373
|
+
"id": {
|
|
374
|
+
"type": "string",
|
|
375
|
+
"minLength": 1,
|
|
376
|
+
"description": "The vulnerability identifier."
|
|
377
|
+
},
|
|
378
|
+
"modified": {
|
|
379
|
+
"type": "string",
|
|
380
|
+
"description": "When the record was last modified.",
|
|
381
|
+
"format": "date-time"
|
|
382
|
+
},
|
|
383
|
+
"published": {
|
|
384
|
+
"type": "string",
|
|
385
|
+
"description": "When the vulnerability was published.",
|
|
386
|
+
"format": "date-time"
|
|
387
|
+
},
|
|
388
|
+
"withdrawn": {
|
|
389
|
+
"type": "string",
|
|
390
|
+
"description": "When the record was withdrawn.",
|
|
391
|
+
"format": "date-time"
|
|
392
|
+
},
|
|
393
|
+
"aliases": {
|
|
394
|
+
"type": "array",
|
|
395
|
+
"items": {
|
|
396
|
+
"type": "string",
|
|
397
|
+
"description": "An alternative identifier."
|
|
398
|
+
},
|
|
399
|
+
"description": "Alternative vulnerability identifiers."
|
|
400
|
+
},
|
|
401
|
+
"related": {
|
|
402
|
+
"type": "array",
|
|
403
|
+
"items": {
|
|
404
|
+
"type": "string",
|
|
405
|
+
"description": "A related identifier."
|
|
406
|
+
},
|
|
407
|
+
"description": "Related vulnerability identifiers."
|
|
408
|
+
},
|
|
409
|
+
"upstream": {
|
|
410
|
+
"type": "array",
|
|
411
|
+
"items": {
|
|
412
|
+
"type": "string",
|
|
413
|
+
"description": "An upstream identifier."
|
|
414
|
+
},
|
|
415
|
+
"description": "Upstream vulnerability identifiers."
|
|
416
|
+
},
|
|
417
|
+
"summary": {
|
|
418
|
+
"type": "string",
|
|
419
|
+
"description": "A short vulnerability summary."
|
|
420
|
+
},
|
|
421
|
+
"details": {
|
|
422
|
+
"type": "string",
|
|
423
|
+
"description": "The detailed vulnerability description."
|
|
424
|
+
},
|
|
425
|
+
"severity": {
|
|
426
|
+
"type": "array",
|
|
427
|
+
"items": {
|
|
428
|
+
"type": "object",
|
|
429
|
+
"properties": {
|
|
430
|
+
"type": {
|
|
431
|
+
"type": "string",
|
|
432
|
+
"minLength": 1,
|
|
433
|
+
"description": "The scoring system, such as CVSS_V3 or CVSS_V4."
|
|
434
|
+
},
|
|
435
|
+
"score": {
|
|
436
|
+
"type": "string",
|
|
437
|
+
"minLength": 1,
|
|
438
|
+
"description": "The severity score or vector encoded for the scoring system."
|
|
439
|
+
}
|
|
440
|
+
},
|
|
441
|
+
"additionalProperties": true,
|
|
442
|
+
"required": [
|
|
443
|
+
"type",
|
|
444
|
+
"score"
|
|
445
|
+
],
|
|
446
|
+
"description": "A severity score encoded with a named scoring system."
|
|
447
|
+
},
|
|
448
|
+
"description": "Severity scores for the vulnerability."
|
|
449
|
+
},
|
|
450
|
+
"affected": {
|
|
451
|
+
"type": "array",
|
|
452
|
+
"items": {
|
|
453
|
+
"type": "object",
|
|
454
|
+
"properties": {
|
|
455
|
+
"package": {
|
|
456
|
+
"type": "object",
|
|
457
|
+
"properties": {
|
|
458
|
+
"name": {
|
|
459
|
+
"type": "string",
|
|
460
|
+
"minLength": 1,
|
|
461
|
+
"description": "The package name as used by its ecosystem."
|
|
462
|
+
},
|
|
463
|
+
"ecosystem": {
|
|
464
|
+
"type": "string",
|
|
465
|
+
"minLength": 1,
|
|
466
|
+
"description": "The case-sensitive OSV ecosystem name, such as npm, PyPI, Go, or Maven."
|
|
467
|
+
},
|
|
468
|
+
"purl": {
|
|
469
|
+
"type": "string",
|
|
470
|
+
"minLength": 1,
|
|
471
|
+
"description": "The package URL assigned by OSV, when available."
|
|
472
|
+
}
|
|
473
|
+
},
|
|
474
|
+
"additionalProperties": true,
|
|
475
|
+
"required": [
|
|
476
|
+
"name",
|
|
477
|
+
"ecosystem"
|
|
478
|
+
],
|
|
479
|
+
"description": "A package identified by its ecosystem and name."
|
|
480
|
+
},
|
|
481
|
+
"severity": {
|
|
482
|
+
"type": "array",
|
|
483
|
+
"items": {
|
|
484
|
+
"type": "object",
|
|
485
|
+
"properties": {
|
|
486
|
+
"type": {
|
|
487
|
+
"type": "string",
|
|
488
|
+
"minLength": 1,
|
|
489
|
+
"description": "The scoring system, such as CVSS_V3 or CVSS_V4."
|
|
490
|
+
},
|
|
491
|
+
"score": {
|
|
492
|
+
"type": "string",
|
|
493
|
+
"minLength": 1,
|
|
494
|
+
"description": "The severity score or vector encoded for the scoring system."
|
|
495
|
+
}
|
|
496
|
+
},
|
|
497
|
+
"additionalProperties": true,
|
|
498
|
+
"required": [
|
|
499
|
+
"type",
|
|
500
|
+
"score"
|
|
501
|
+
],
|
|
502
|
+
"description": "A severity score encoded with a named scoring system."
|
|
503
|
+
},
|
|
504
|
+
"description": "Package-specific severity scores."
|
|
505
|
+
},
|
|
506
|
+
"ranges": {
|
|
507
|
+
"type": "array",
|
|
508
|
+
"items": {
|
|
509
|
+
"type": "object",
|
|
510
|
+
"properties": {
|
|
511
|
+
"type": {
|
|
512
|
+
"type": "string",
|
|
513
|
+
"minLength": 1,
|
|
514
|
+
"description": "The range type, such as SEMVER, ECOSYSTEM, or GIT."
|
|
515
|
+
},
|
|
516
|
+
"repo": {
|
|
517
|
+
"type": "string",
|
|
518
|
+
"description": "The source repository for a GIT range.",
|
|
519
|
+
"format": "uri"
|
|
520
|
+
},
|
|
521
|
+
"events": {
|
|
522
|
+
"type": "array",
|
|
523
|
+
"items": {
|
|
524
|
+
"type": "object",
|
|
525
|
+
"properties": {
|
|
526
|
+
"introduced": {
|
|
527
|
+
"type": "string",
|
|
528
|
+
"description": "The version or commit where the affected range begins."
|
|
529
|
+
},
|
|
530
|
+
"fixed": {
|
|
531
|
+
"type": "string",
|
|
532
|
+
"description": "The version or commit where the affected range ends."
|
|
533
|
+
},
|
|
534
|
+
"last_affected": {
|
|
535
|
+
"type": "string",
|
|
536
|
+
"description": "The last known affected version or commit."
|
|
537
|
+
},
|
|
538
|
+
"limit": {
|
|
539
|
+
"type": "string",
|
|
540
|
+
"description": "The first version or commit outside the affected range."
|
|
541
|
+
}
|
|
542
|
+
},
|
|
543
|
+
"additionalProperties": true,
|
|
544
|
+
"description": "A version or commit event delimiting an affected range."
|
|
545
|
+
},
|
|
546
|
+
"description": "Ordered events delimiting the affected range."
|
|
547
|
+
}
|
|
548
|
+
},
|
|
549
|
+
"additionalProperties": true,
|
|
550
|
+
"required": [
|
|
551
|
+
"type",
|
|
552
|
+
"events"
|
|
553
|
+
],
|
|
554
|
+
"description": "A version or commit range affected by the vulnerability."
|
|
555
|
+
},
|
|
556
|
+
"description": "Affected version or commit ranges."
|
|
557
|
+
},
|
|
558
|
+
"versions": {
|
|
559
|
+
"type": "array",
|
|
560
|
+
"items": {
|
|
561
|
+
"type": "string",
|
|
562
|
+
"description": "An affected package version."
|
|
563
|
+
},
|
|
564
|
+
"description": "Known affected versions."
|
|
565
|
+
},
|
|
566
|
+
"ecosystem_specific": {
|
|
567
|
+
"description": "Additional data defined by the package ecosystem."
|
|
568
|
+
},
|
|
569
|
+
"database_specific": {
|
|
570
|
+
"description": "Additional data defined by the source vulnerability database."
|
|
571
|
+
}
|
|
572
|
+
},
|
|
573
|
+
"additionalProperties": true,
|
|
574
|
+
"required": [
|
|
575
|
+
"package"
|
|
576
|
+
],
|
|
577
|
+
"description": "One package affected by the vulnerability."
|
|
578
|
+
},
|
|
579
|
+
"description": "Packages affected by the vulnerability."
|
|
580
|
+
},
|
|
581
|
+
"references": {
|
|
582
|
+
"type": "array",
|
|
583
|
+
"items": {
|
|
584
|
+
"type": "object",
|
|
585
|
+
"properties": {
|
|
586
|
+
"type": {
|
|
587
|
+
"type": "string",
|
|
588
|
+
"minLength": 1,
|
|
589
|
+
"description": "The OSV reference type, such as ADVISORY, REPORT, or WEB."
|
|
590
|
+
},
|
|
591
|
+
"url": {
|
|
592
|
+
"type": "string",
|
|
593
|
+
"description": "The referenced resource URL.",
|
|
594
|
+
"format": "uri"
|
|
595
|
+
}
|
|
596
|
+
},
|
|
597
|
+
"additionalProperties": true,
|
|
598
|
+
"required": [
|
|
599
|
+
"type",
|
|
600
|
+
"url"
|
|
601
|
+
],
|
|
602
|
+
"description": "A reference associated with the vulnerability."
|
|
603
|
+
},
|
|
604
|
+
"description": "References associated with the vulnerability."
|
|
605
|
+
},
|
|
606
|
+
"credits": {
|
|
607
|
+
"type": "array",
|
|
608
|
+
"items": {
|
|
609
|
+
"type": "object",
|
|
610
|
+
"properties": {
|
|
611
|
+
"name": {
|
|
612
|
+
"type": "string",
|
|
613
|
+
"minLength": 1,
|
|
614
|
+
"description": "The credited person or organization."
|
|
615
|
+
},
|
|
616
|
+
"contact": {
|
|
617
|
+
"type": "array",
|
|
618
|
+
"items": {
|
|
619
|
+
"type": "string",
|
|
620
|
+
"description": "A contact identifier."
|
|
621
|
+
},
|
|
622
|
+
"description": "Contact identifiers for the credited party."
|
|
623
|
+
},
|
|
624
|
+
"type": {
|
|
625
|
+
"type": "string",
|
|
626
|
+
"description": "The credit role defined by the OSV schema."
|
|
627
|
+
}
|
|
628
|
+
},
|
|
629
|
+
"additionalProperties": true,
|
|
630
|
+
"required": [
|
|
631
|
+
"name"
|
|
632
|
+
],
|
|
633
|
+
"description": "Credit for discovering, reporting, or remediating the vulnerability."
|
|
634
|
+
},
|
|
635
|
+
"description": "Credits associated with the vulnerability."
|
|
636
|
+
},
|
|
637
|
+
"database_specific": {
|
|
638
|
+
"description": "Additional data defined by the source vulnerability database."
|
|
639
|
+
}
|
|
640
|
+
},
|
|
641
|
+
"additionalProperties": true,
|
|
642
|
+
"required": [
|
|
643
|
+
"id",
|
|
644
|
+
"modified"
|
|
645
|
+
],
|
|
646
|
+
"description": "An OSV vulnerability record."
|
|
647
|
+
},
|
|
648
|
+
"description": "Vulnerabilities affecting the package version."
|
|
649
|
+
},
|
|
650
|
+
"nextPageToken": {
|
|
651
|
+
"type": "string",
|
|
652
|
+
"description": "The continuation token when more results are available."
|
|
653
|
+
}
|
|
654
|
+
},
|
|
655
|
+
"additionalProperties": false,
|
|
656
|
+
"required": [
|
|
657
|
+
"vulnerabilities"
|
|
658
|
+
],
|
|
659
|
+
"description": "Known vulnerabilities returned by OSV."
|
|
660
|
+
}
|
|
661
|
+
}
|
|
662
|
+
]
|
|
663
|
+
}
|