{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "CISA Known Exploited Vulnerabilities catalog",
  "type": "object",
  "required": [
    "catalogVersion",
    "dateReleased",
    "count",
    "vulnerabilities"
  ],
  "properties": {
    "title": {
      "type": "string"
    },
    "catalogVersion": {
      "type": "string",
      "minLength": 1
    },
    "dateReleased": {
      "type": "string",
      "format": "date-time"
    },
    "count": {
      "type": "integer",
      "minimum": 0
    },
    "vulnerabilities": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "cveID",
          "vendorProject",
          "product"
        ],
        "properties": {
          "cveID": {
            "type": "string",
            "pattern": "^CVE-\\d{4}-\\d{4,}$"
          },
          "vendorProject": {
            "type": "string"
          },
          "product": {
            "type": "string"
          },
          "vulnerabilityName": {
            "type": "string"
          },
          "dateAdded": {
            "type": "string"
          },
          "shortDescription": {
            "type": "string"
          },
          "requiredAction": {
            "type": "string"
          },
          "dueDate": {
            "type": "string"
          },
          "knownRansomwareCampaignUse": {
            "type": "string"
          },
          "notes": {
            "type": "string"
          },
          "cwes": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "additionalProperties": true
      }
    }
  },
  "additionalProperties": true
}
