CVEProject/cve-services

2.3.0 datadump/pre-population/ has dataVersion 5.0

ElectricNroff opened this issue · 0 comments

https://github.com/CVEProject/cve-services/blob/cae6ba3d357c2c9cbf888cb5506c933f272698fe/docker/README.md says

Populate mongoDB with test data included in datadump/pre-population/

but

"dataType": "CVE_RECORD",
"dataVersion": "5.0"

If an end user chooses to test their adoption of the 5.1.0 CVE Record format by installing their own instance of CVE Services 2.3.0 and retrieving the test data, they will obtain JSON documents with "dataVersion": "5.0" and this will not provide assurance that their local copy of the CVE Record format schema (e.g., within a locally developed tool that uses the GET /cve/:id endpoint) has been updated to one that allows the current dataVersion value.