After reviewing the CVE_JSON_4.0_min_public.schema JSON Schema definition and then reading the DRAFT-JSON-file-format-v4.md document, I noticed that the .schema
file was missing many of the keys/Objects described in DRAFT-JSON-file-format-v4.md (ex: configuration
, impact
, version_affected
). Is this intentional or a mistake? Is CVE_JSON_4.0_min_public.schema
intended to be a minimal subset of the CVE v4.0 JSON Schema? If so, does a complete JSON Schema definition file exist for CVE v4.0?