Method severities

vulnerabilities/pipelines/nvd_importer.py:198–229

Return a list of VulnerabilitySeverity for this CVE.

(self)

    @property
    def severities(self):
        """
        Return a list of VulnerabilitySeverity for this CVE.
        """
        severities = []
        metrics = get_item(self.cve_item, "cve", "metrics") or {}
        url = f"https://nvd.nist.gov/vuln/detail/{self.cve_id}"
        metric_configs = [
            ("cvssMetricV40", severity_systems.CVSSV4),
            ("cvssMetricV31", severity_systems.CVSSV31),
            ("cvssMetricV30", severity_systems.CVSSV3),
            ("cvssMetricV2", severity_systems.CVSSV2),
        ]

        for key, default_system in metric_configs:
            items = metrics.get(key) or []

            for item in items:
                cvss_data = item.get("cvssData") or {}
                system = default_system
                if key == "cvssMetricV31" and cvss_data.get("version") != "3.1":
                    system = severity_systems.CVSSV3

                severities.append(
                    VulnerabilitySeverity(
                        system=system,
                        value=str(cvss_data.get("baseScore") or ""),
                        scoring_elements=str(cvss_data.get("vectorString") or ""),
                        url=url,
                    )
                )
        return severities

    @property
    def reference_urls(self):