{"openapi":"3.1.0","info":{"title":"Vulners API","version":"0.1.0"},"paths":{"/api/v4/audit/cve":{"post":{"tags":["audit:v4"],"summary":"Cve Audit","operationId":"cve_audit_api_v4_audit_cve_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CveAuditInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/audit/cves":{"post":{"tags":["audit:v4"],"summary":"Batch Cve Audit","operationId":"batch_cve_audit_api_v4_audit_cves_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/BatchCveAuditInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/audit/kb":{"post":{"tags":["audit:v4"],"summary":"Audit Kb","description":"Audit Windows update state against Microsoft KB bulletins.\n\nReturns a single item for the audited OS, carrying one advisory per missing\nupdate, newest first. `fixedPackage` names the update to install.\n\n`osName` labels the result and is echoed back as `package`; send whatever the\nhost calls itself. What is missing is decided by `kbList` alone. The\nauthoritative product name is `affectedProducts` on each advisory.\n\n`metrics` is the advisory-level answer and both its halves are rollups:\n`cvss` is the highest score across the advisory's CVEs, `epss` the highest\nprobability, carried as a one-element array. The full per-CVE listing lives in\n`cvelistMetrics` - that is the one place to ask for it. `date` and\n`percentile` in both blocks come from a single EPSS snapshot. If the EPSS\nstore is unreachable, `metrics.epss` arrives empty rather than holding bare\nCVE ids.","operationId":"audit_kb_api_v4_audit_kb_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/KbAuditInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/audit/library":{"post":{"tags":["audit:v4"],"summary":"Audit Library","description":"Audit library purls against advisories.\n\nOrdering and joining follow `audit/linux`: worst-first by advisory count then\npackage name, never request order, with unmatched packages omitted and\nunparseable ones reported in `errors` by request position. Join on `package`.","operationId":"audit_library_api_v4_audit_library_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/LibraryAuditInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/audit/linux":{"post":{"tags":["audit:v4"],"summary":"Audit Linux","description":"Audit installed Linux packages against distribution advisories.\n\nResults are **not** returned in request order: issues come back worst-first,\nordered by advisory count descending and then by package name. Packages with\nno findings are omitted altogether, and unparseable ones are reported in\n`errors` keyed by their position in the request.\n\nJoin on `package`, which echoes the request line verbatim. Matching by\nposition silently attributes one package's findings to another.","operationId":"audit_linux_api_v4_audit_linux_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/LinuxAuditInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/audit/metadata":{"post":{"tags":["audit:v4"],"summary":"Metadata","operationId":"metadata_api_v4_audit_metadata_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PackageMetadataInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/audit/package/{content_type}":{"post":{"tags":["audit:v4"],"summary":"Audit","operationId":"audit_api_v4_audit_package__content_type__post","security":[{"APIKeyHeader":[]}],"parameters":[{"name":"content_type","in":"path","required":true,"schema":{"enum":["maven","pip","poetry","npm","golang","uv"],"type":"string","title":"Content Type"}},{"name":"includeAnyVersion","in":"query","required":false,"schema":{"type":"boolean","default":true,"title":"Includeanyversion"}},{"name":"includeCandidates","in":"query","required":false,"schema":{"type":"boolean","default":false,"title":"Includecandidates"}},{"name":"includeUnofficial","in":"query","required":false,"schema":{"type":"boolean","default":false,"title":"Includeunofficial"}},{"name":"includeTransitives","in":"query","required":false,"schema":{"type":"boolean","default":false,"title":"Includetransitives"}}],"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v4/audit/sbom":{"post":{"tags":["audit:v4"],"summary":"Sbom","description":"Audit an SBOM against advisories.\n\nComponents come back worst-first, by advisory count descending and then by\npackage name - not in the order they appear in the file. Components with no\nfindings are omitted. Join on `package`.","operationId":"sbom_api_v4_audit_sbom_post","security":[{"APIKeyHeader":[]}],"parameters":[{"name":"cvelistMetrics","in":"query","required":false,"schema":{"type":"boolean","default":false,"title":"Cvelistmetrics"}},{"name":"fields","in":"query","required":false,"schema":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}],"title":"Fields"}}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_sbom_api_v4_audit_sbom_post"}}}},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v4/audit/sbom-ai-summary":{"get":{"tags":["audit:v4"],"summary":"Sbom Ai Summary","operationId":"sbom_ai_summary_api_v4_audit_sbom_ai_summary_get","security":[{"APIKeyHeader":[]}],"parameters":[{"name":"id","in":"query","required":true,"schema":{"type":"string","description":"Summary ID returned by SBOM audit endpoint","title":"Id"},"description":"Summary ID returned by SBOM audit endpoint"}],"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v4/audit/smart":{"post":{"tags":["audit:v4"],"summary":"Audit Smart","description":"Audit raw software strings collected from a host.\n\nOne item per input string, in request order, including strings that resolved\nto nothing - so this is the one audit endpoint where positions do line up.\nJoin on `input` anyway: it costs nothing and survives the ordering ever\nchanging.\n\nFree text is resolved against the extended CPE catalog (NVD plus Vulners\nentries), while `audit/software` defaults to the official one. The catalog\ngoverns which CPE name an input resolves to, not which advisories a resolved\nCPE matches: given the same CPE both endpoints answer with the same advisory\nset. `cpe` reports what this endpoint resolved to, so feeding it to\n`audit/software` compares like with like; a product that has no official CPE\nis where the two would otherwise part company.\n\n`metrics` is the advisory-level answer and both its halves are rollups:\n`cvss` is the highest score across the advisory's CVEs, `epss` the highest\nprobability, carried as a one-element array. The full per-CVE listing lives in\n`cvelistMetrics` - that is the one place to ask for it. `date` and\n`percentile` in both blocks come from a single EPSS snapshot. If the EPSS\nstore is unreachable, `metrics.epss` arrives empty rather than holding bare\nCVE ids.","operationId":"audit_smart_api_v4_audit_smart_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SmartAuditInput"}}},"required":true},"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}},"security":[{"APIKeyHeader":[]}]}},"/api/v4/stix/bundle":{"get":{"tags":["stix:v4"],"summary":"Get Bundle By Id","description":"Получает STIX bundle для указанного бюллетеня.\n\nArgs:\n    bulletin_id: ID бюллетеня Vulners\n    license_obj: Объект лицензии\n    opencti_id: ID объекта в OpenCTI (для обогащения)\n\nReturns:\n    STIX Bundle with objects","operationId":"get_bundle_by_id_api_v4_stix_bundle_get","security":[{"APIKeyHeader":[]}],"parameters":[{"name":"id","in":"query","required":true,"schema":{"type":"string","title":"Id"}},{"name":"opencti_id","in":"query","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Opencti Id"}}],"responses":{"200":{"description":"Successful Response"},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}}},"components":{"schemas":{"AuditApplicableAdvisory":{"properties":{"id":{"type":"string","title":"Id"},"match":{"type":"string","title":"Match"},"registry":{"type":"string","title":"Registry"},"distro":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Distro"},"arch":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Arch"},"classifier":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Classifier"},"cvelistMetrics":{"anyOf":[{"items":{"additionalProperties":true,"type":"object"},"type":"array"},{"type":"null"}],"title":"Cvelistmetrics"},"metrics":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Metrics"},"exploitation":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Exploitation"}},"type":"object","required":["id","match","registry","distro","arch","classifier"],"title":"AuditApplicableAdvisory"},"AuditIssue":{"properties":{"package":{"type":"string","title":"Package"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version"},"fixedVersion":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Fixedversion"},"applicableAdvisories":{"items":{"$ref":"#/components/schemas/AuditApplicableAdvisory"},"type":"array","title":"Applicableadvisories"}},"type":"object","required":["package","version","fixedVersion","applicableAdvisories"],"title":"AuditIssue"},"BatchCveAuditInput":{"properties":{"cve":{"items":{"type":"string","pattern":"C(?:VE|AN)-\\d{4}-\\d{4,}$"},"type":"array","maxItems":500,"minItems":1,"title":"Cve"}},"type":"object","required":["cve"],"title":"BatchCveAuditInput"},"Body_sbom_api_v4_audit_sbom_post":{"properties":{"file":{"type":"string","contentMediaType":"application/octet-stream","title":"File","description":"SBOM file"}},"type":"object","required":["file"],"title":"Body_sbom_api_v4_audit_sbom_post"},"CveAuditAffectedCpe":{"properties":{"id":{"type":"string","title":"Id"},"type":{"type":"string","title":"Type"},"cpeConfigurations":{"additionalProperties":true,"type":"object","title":"Cpeconfigurations"}},"type":"object","required":["id","type","cpeConfigurations"],"title":"CveAuditAffectedCpe"},"CveAuditAffectedPackage":{"properties":{"id":{"type":"string","title":"Id"},"name":{"type":"string","title":"Name"},"range":{"type":"string","title":"Range"},"registry":{"type":"string","title":"Registry"},"distro":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Distro"},"arch":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Arch"},"classifier":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Classifier"}},"type":"object","required":["id","name","range","registry","distro","arch","classifier"],"title":"CveAuditAffectedPackage"},"CveAuditInput":{"properties":{"cve":{"type":"string","pattern":"C(?:VE|AN)-\\d{4}-\\d{4,}$","title":"Cve"}},"type":"object","required":["cve"],"title":"CveAuditInput"},"CveAuditIssue":{"properties":{"cve":{"type":"string","title":"Cve"},"affectedPackages":{"items":{"$ref":"#/components/schemas/CveAuditAffectedPackage"},"type":"array","title":"Affectedpackages"},"affectedCpe":{"items":{"$ref":"#/components/schemas/CveAuditAffectedCpe"},"type":"array","title":"Affectedcpe"}},"type":"object","required":["cve","affectedPackages","affectedCpe"],"title":"CveAuditIssue"},"HTTPValidationError":{"properties":{"detail":{"items":{"$ref":"#/components/schemas/ValidationError"},"type":"array","title":"Detail"}},"type":"object","title":"HTTPValidationError"},"InputPackageType":{"type":"string"},"KbAuditAdvisory":{"properties":{"id":{"type":"string","title":"Id"},"type":{"type":"string","title":"Type","default":"mskb"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"href":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Href"},"published":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Published"},"modified":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Modified"},"affectedProducts":{"items":{"type":"string"},"type":"array","title":"Affectedproducts"},"msfamily":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Msfamily"},"severity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Severity"},"supersedes":{"items":{"type":"string"},"type":"array","title":"Supersedes"},"cvelist":{"items":{"type":"string"},"type":"array","title":"Cvelist"},"metrics":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Metrics"},"cvelistMetrics":{"anyOf":[{"items":{"additionalProperties":true,"type":"object"},"type":"array"},{"type":"null"}],"title":"Cvelistmetrics"}},"type":"object","required":["id"],"title":"KbAuditAdvisory","description":"One missing Windows update, carrying the CVEs it and its chain remediate.\n\n`supersedes` is exposed on purpose: it is the answer to \"why does installing\none update clear two thousand findings\", and without it the count reads as\narbitrary on a dashboard."},"KbAuditInput":{"properties":{"osName":{"type":"string","maxLength":256,"minLength":1,"title":"Osname"},"kbList":{"items":{"type":"string"},"type":"array","maxItems":2500,"minItems":1,"title":"Kblist"},"osVersion":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Osversion"},"fields":{"items":{"type":"string","pattern":"^(metrics|cvelistMetrics)$"},"type":"array","title":"Fields"},"cvelistMetrics":{"type":"boolean","title":"Cvelistmetrics","default":false}},"additionalProperties":false,"type":"object","required":["osName","kbList"],"title":"KbAuditInput"},"KbAuditIssue":{"properties":{"package":{"type":"string","title":"Package"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version"},"fixedPackage":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Fixedpackage"},"advisories":{"items":{"$ref":"#/components/schemas/KbAuditAdvisory"},"type":"array","title":"Advisories"}},"type":"object","required":["package","advisories"],"title":"KbAuditIssue"},"KbAuditOutput":{"properties":{"items":{"items":{"$ref":"#/components/schemas/KbAuditIssue"},"type":"array","title":"Items"},"totalPackages":{"type":"integer","title":"Totalpackages"}},"type":"object","required":["items","totalPackages"],"title":"KbAuditOutput"},"LibraryAuditInput":{"properties":{"packages":{"items":{"type":"string"},"type":"array","maxItems":2500,"minItems":1,"title":"Packages"},"includeUnofficial":{"type":"boolean","title":"Includeunofficial","default":false},"includeCandidates":{"type":"boolean","title":"Includecandidates","default":false},"includeAnyVersion":{"type":"boolean","title":"Includeanyversion","default":false},"cvelistMetrics":{"type":"boolean","title":"Cvelistmetrics","default":false},"fields":{"items":{"type":"string"},"type":"array","title":"Fields"}},"type":"object","required":["packages"],"title":"LibraryAuditInput"},"LibraryAuditOutput":{"properties":{"issues":{"items":{"$ref":"#/components/schemas/AuditIssue"},"type":"array","title":"Issues"},"errors":{"additionalProperties":{"type":"string"},"type":"object","title":"Errors"},"totalPackages":{"type":"integer","title":"Totalpackages"},"appliedOptions":{"items":{"type":"string"},"type":"array","title":"Appliedoptions"},"warnings":{"items":{"additionalProperties":{"type":"string"},"type":"object"},"type":"array","title":"Warnings"}},"type":"object","required":["issues","errors","totalPackages"],"title":"LibraryAuditOutput"},"LinuxAuditApplicableAdvisory":{"properties":{"id":{"type":"string","title":"Id"},"match":{"type":"string","title":"Match"},"registry":{"type":"string","title":"Registry"},"distro":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Distro"},"arch":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Arch"},"classifier":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Classifier"},"cvelistMetrics":{"anyOf":[{"items":{"additionalProperties":true,"type":"object"},"type":"array"},{"type":"null"}],"title":"Cvelistmetrics"},"metrics":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Metrics"},"exploitation":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Exploitation"},"operator":{"type":"string","enum":["lt","le","eq"],"title":"Operator"},"version":{"type":"string","title":"Version"},"published":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Published"}},"type":"object","required":["id","match","registry","distro","arch","classifier","operator","version"],"title":"LinuxAuditApplicableAdvisory"},"LinuxAuditInput":{"properties":{"osName":{"type":"string","title":"Osname"},"osVersion":{"type":"string","title":"Osversion"},"osArch":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Osarch"},"packages":{"items":{"type":"string"},"type":"array","maxItems":2500,"minItems":1,"title":"Packages"},"includeUnofficial":{"type":"boolean","title":"Includeunofficial","default":false},"includeCandidates":{"type":"boolean","title":"Includecandidates","default":false},"includeAnyVersion":{"type":"boolean","title":"Includeanyversion","default":false},"cvelistMetrics":{"type":"boolean","title":"Cvelistmetrics","default":false},"fields":{"items":{"type":"string"},"type":"array","title":"Fields"}},"type":"object","required":["osName","osVersion","packages"],"title":"LinuxAuditInput"},"LinuxAuditIssue":{"properties":{"package":{"type":"string","title":"Package"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version"},"fixedVersion":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Fixedversion"},"applicableAdvisories":{"items":{"$ref":"#/components/schemas/LinuxAuditApplicableAdvisory"},"type":"array","title":"Applicableadvisories"},"fixedPackage":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Fixedpackage"}},"type":"object","required":["package","version","fixedVersion","applicableAdvisories","fixedPackage"],"title":"LinuxAuditIssue"},"LinuxAuditOutput":{"properties":{"issues":{"items":{"$ref":"#/components/schemas/LinuxAuditIssue"},"type":"array","title":"Issues"},"errors":{"additionalProperties":{"type":"string"},"type":"object","title":"Errors"},"totalPackages":{"type":"integer","title":"Totalpackages"},"appliedOptions":{"items":{"type":"string"},"type":"array","title":"Appliedoptions"},"warnings":{"items":{"additionalProperties":{"type":"string"},"type":"object"},"type":"array","title":"Warnings"}},"type":"object","required":["issues","errors","totalPackages"],"title":"LinuxAuditOutput"},"Ok_Any_":{"properties":{"result":{"title":"Result"}},"type":"object","required":["result"],"title":"Ok"},"Ok_CveAuditIssue_":{"properties":{"result":{"$ref":"#/components/schemas/CveAuditIssue"}},"type":"object","required":["result"],"title":"Ok"},"Ok_KbAuditOutput_":{"properties":{"result":{"$ref":"#/components/schemas/KbAuditOutput"}},"type":"object","required":["result"],"title":"Ok"},"Ok_LibraryAuditOutput_":{"properties":{"result":{"$ref":"#/components/schemas/LibraryAuditOutput"}},"type":"object","required":["result"],"title":"Ok"},"Ok_LinuxAuditOutput_":{"properties":{"result":{"$ref":"#/components/schemas/LinuxAuditOutput"}},"type":"object","required":["result"],"title":"Ok"},"Ok_PackageAuditOutput_":{"properties":{"result":{"$ref":"#/components/schemas/PackageAuditOutput"}},"type":"object","required":["result"],"title":"Ok"},"Ok_PackageMetadata_":{"properties":{"result":{"$ref":"#/components/schemas/PackageMetadata"}},"type":"object","required":["result"],"title":"Ok"},"Ok_SbomAuditV4Output_":{"properties":{"result":{"$ref":"#/components/schemas/SbomAuditV4Output"}},"type":"object","required":["result"],"title":"Ok"},"Ok_list_CveAuditIssue__":{"properties":{"result":{"items":{"$ref":"#/components/schemas/CveAuditIssue"},"type":"array","title":"Result"}},"type":"object","required":["result"],"title":"Ok"},"Ok_list_SmartAuditItem__":{"properties":{"result":{"items":{"$ref":"#/components/schemas/SmartAuditItem"},"type":"array","title":"Result"}},"type":"object","required":["result"],"title":"Ok"},"PackageAuditOutput":{"properties":{"issues":{"items":{"$ref":"#/components/schemas/AuditIssue"},"type":"array","title":"Issues"},"totalPackages":{"type":"integer","title":"Totalpackages"}},"type":"object","required":["issues","totalPackages"],"title":"PackageAuditOutput"},"PackageMetadata":{"properties":{"name":{"type":"string","title":"Name"},"version":{"type":"string","title":"Version"},"range":{"type":"string","title":"Range"},"license":{"items":{"type":"string"},"type":"array","title":"License"}},"type":"object","required":["name","version","range","license"],"title":"PackageMetadata"},"PackageMetadataInput":{"properties":{"registry":{"$ref":"#/components/schemas/InputPackageType"},"name":{"type":"string","minLength":1,"title":"Name"},"version":{"type":"string","minLength":1,"title":"Version"}},"type":"object","required":["registry","name","version"],"title":"PackageMetadataInput"},"SbomAuditApplicableAdvisory":{"properties":{"id":{"type":"string","title":"Id"},"match":{"type":"string","title":"Match"},"registry":{"type":"string","title":"Registry"},"distro":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Distro"},"arch":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Arch"},"classifier":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Classifier"},"cvelistMetrics":{"anyOf":[{"items":{"additionalProperties":true,"type":"object"},"type":"array"},{"type":"null"}],"title":"Cvelistmetrics"},"metrics":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Metrics"},"exploitation":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Exploitation"},"type":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Type"},"title":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Title"},"description":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Description"},"aiDescription":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Aidescription"},"published":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Published"},"epss":{"anyOf":[{"items":{"additionalProperties":true,"type":"object"},"type":"array"},{"type":"null"}],"title":"Epss"},"aiScore":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Aiscore"},"enchantments":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Enchantments"},"webApplicability":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Webapplicability"},"references":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"References"},"exploits":{"anyOf":[{"items":{"additionalProperties":true,"type":"object"},"type":"array"},{"type":"null"}],"title":"Exploits"},"cvelist":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"title":"Cvelist"}},"type":"object","required":["id","match","registry","distro","arch","classifier"],"title":"SbomAuditApplicableAdvisory"},"SbomAuditIssue":{"properties":{"package":{"type":"string","title":"Package"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Version"},"fixedVersion":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Fixedversion"},"applicableAdvisories":{"items":{"$ref":"#/components/schemas/SbomAuditApplicableAdvisory"},"type":"array","title":"Applicableadvisories"}},"type":"object","required":["package","version","fixedVersion","applicableAdvisories"],"title":"SbomAuditIssue"},"SbomAuditV4Output":{"properties":{"data":{"items":{"$ref":"#/components/schemas/SbomAuditIssue"},"type":"array","title":"Data"},"summaryId":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Summaryid"},"totalPackages":{"type":"integer","title":"Totalpackages"},"appliedOptions":{"items":{"type":"string"},"type":"array","title":"Appliedoptions"},"warnings":{"items":{"additionalProperties":{"type":"string"},"type":"object"},"type":"array","title":"Warnings"}},"type":"object","required":["data","totalPackages"],"title":"SbomAuditV4Output"},"SmartAuditInput":{"properties":{"software":{"items":{"type":"string","maxLength":512,"minLength":1},"type":"array","maxItems":500,"minItems":1,"title":"Software"},"fields":{"items":{"type":"string","enum":["aiDescription","title","short_description","type","bulletinFamily","published","modified","lastseen","href","metrics","exploitation","cvelist","ai_score","epss","description","enchantments","webApplicability","cvelistMetrics","reporter","references","cvss2","cvss3","cvss4","exploits","viewCount"]},"type":"array","title":"Fields","default":["title","short_description","type","href","published","modified","ai_score"]},"cvelistMetrics":{"type":"boolean","title":"Cvelistmetrics","default":false}},"additionalProperties":false,"type":"object","required":["software"],"title":"SmartAuditInput"},"SmartAuditItem":{"properties":{"input":{"type":"string","title":"Input"},"cpe":{"type":"string","title":"Cpe"},"purls":{"items":{"type":"string"},"type":"array","title":"Purls"},"confidence":{"type":"number","title":"Confidence"},"fixedVersion":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Fixedversion"},"vulnerabilities":{"items":{"additionalProperties":true,"type":"object"},"type":"array","title":"Vulnerabilities"}},"type":"object","required":["input","cpe","purls","confidence","vulnerabilities"],"title":"SmartAuditItem"},"ValidationError":{"properties":{"loc":{"items":{"anyOf":[{"type":"string"},{"type":"integer"}]},"type":"array","title":"Location"},"msg":{"type":"string","title":"Message"},"type":{"type":"string","title":"Error Type"},"input":{"title":"Input"},"ctx":{"type":"object","title":"Context"}},"type":"object","required":["loc","msg","type"],"title":"ValidationError"}},"securitySchemes":{"APIKeyHeader":{"type":"apiKey","in":"header","name":"x-api-key"}}}}