Expand description
§RustSec: Common Vulnerability Scoring System
Rust implementation of the Common Vulnerability Scoring System (Version 3.1 and 4.0) Specification.
§Minimum Supported Rust Version
Rust 1.60 or higher.
Minimum supported Rust version can be changed in the future, but it will be done with a minor version bump.
§License
Licensed under either of:
- Apache License, Version 2.0 (LICENSE-APACHE or https://www.apache.org/licenses/LICENSE-2.0)
- MIT license (LICENSE-MIT or https://opensource.org/licenses/MIT)
at your option.
§Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you shall be dual licensed as above, without any additional terms or conditions.
§Usage
The Cvss type provides a unified interface for working with CVSS
vectors.
The v2::Vector type provides a fully-featured implementation of CVSS
v2.0 — parsing, serializing, and scoring of the Base, Temporal, and
Environmental groups as described in the CVSS v2.0 Specification.
The v3::Vector type provides the main functionality currently
implemented for CVSS v3, namely: support for parsing, serializing, and
scoring CVSS:3.0 and CVSS:3.1 Base, Temporal, and Environmental
Metric Group vector strings as described in the
CVSS v3.1 Specification.
The v4::Vector type provides a fully-featured implementation of CVSS
v4.0, as described in the CVSS v4.0 Specification.
Serde support is available through the optional serde Cargo feature.
Modules§
- v2
v2 - Common Vulnerability Scoring System (v2.0)
- v3
v3 - Common Vulnerability Scoring System (v3.1)
- v4
v4 - Common Vulnerability Scoring System (v4.0)
Enums§
- Cvss
- A CVSS vector
- Error
- Kinds of errors
- Metric
Type - Metric type (across CVSS versions)
- Severity
- Qualitative Severity Rating Scale
Constants§
- PREFIX
- Prefix used by all CVSS strings