Vulnerability ¶

class Vulnerability(TypedDict, closed=True):
    id: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
    """<p>The identifier of the vulnerability.</p>"""
    vulnerable_packages: NotRequired[
        "capo_securityhub.types.software_package_list.SoftwarePackageList"
    ]
    """<p>List of software packages that have the vulnerability.</p>"""
    cvss: NotRequired["capo_securityhub.types.cvss_list.CvssList"]
    """<p>CVSS scores from the advisory related to the vulnerability.</p>"""
    related_vulnerabilities: NotRequired[
        "capo_securityhub.types.string_list.StringList"
    ]
    """<p>List of vulnerabilities that are related to this vulnerability.</p>"""
    vendor: NotRequired[
        "capo_securityhub.types.vulnerability_vendor.VulnerabilityVendor"
    ]
    """<p>Information about the vendor that generates the vulnerability report.</p>"""
    reference_urls: NotRequired["capo_securityhub.types.string_list.StringList"]
    """<p>A list of URLs that provide additional information about the vulnerability.</p>"""
    fix_available: NotRequired[
        "capo_securityhub.types.vulnerability_fix_available.VulnerabilityFixAvailable"
    ]
    """<p>Specifies if all vulnerable packages in a finding have a value for <code>FixedInVersion</code> and <code>Remediation</code>. This field is evaluated for each vulnerability <code>Id</code> based on the number of vulnerable packages that have a value for both <code>FixedInVersion</code> and <code>Remediation</code>. Valid values are as follows:</p> <ul> <li> <p> <code>YES</code> if all vulnerable packages have a value for both <code>FixedInVersion</code> and <code>Remediation</code> </p> </li> <li> <p> <code>NO</code> if no vulnerable packages have a value for <code>FixedInVersion</code> and <code>Remediation</code> </p> </li> <li> <p> <code>PARTIAL</code> otherwise</p> </li> </ul>"""
    epss_score: NotRequired["capo_securityhub.types.double.Double"]
    """<p>The Exploit Prediction Scoring System (EPSS) score for a finding. </p>"""
    exploit_available: NotRequired[
        "capo_securityhub.types.vulnerability_exploit_available.VulnerabilityExploitAvailable"
    ]
    """<p>Whether an exploit is available for a finding. </p>"""
    last_known_exploit_at: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p> The date and time of the last exploit associated with a finding discovered in your environment. </p>"""
    code_vulnerabilities: NotRequired[
        "capo_securityhub.types.vulnerability_code_vulnerabilities_list.VulnerabilityCodeVulnerabilitiesList"
    ]
    """<p>The vulnerabilities found in your Lambda function code. This field pertains to findings that Security Hub CSPM receives from Amazon Inspector. </p>"""