Ported rating clarification to 2.0 branch. #722

stevespringett · stevespringett · commit 24fd64adc358 · 2026-02-07T17:00:52.000-06:00
Signed-off-by: Steve Springett &lt;steve@springett.us&gt;
diff --git a/schema/2.0/model/cyclonedx-vulnerability-2.0.schema.json b/schema/2.0/model/cyclonedx-vulnerability-2.0.schema.json
@@ -69,7 +69,7 @@
         "ratings": {
           "type": "array",
           "title": "Ratings",
-          "description": "List of vulnerability ratings",
+          "description": "List of vulnerability ratings. Consumers should consider ratings in prioritization decisions; source ratings may differ and aid prioritization.",
           "items": {
             "$ref": "#/$defs/rating"
           }

Original file line number	Diff line number	Diff line change
`@@ -69,7 +69,7 @@`
`69`	`69`	`"ratings": {`
`70`	`70`	`"type": "array",`
`71`	`71`	`"title": "Ratings",`
`72`		`- "description": "List of vulnerability ratings",`
	`72`	`+ "description": "List of vulnerability ratings. Consumers should consider ratings in prioritization decisions; source ratings may differ and aid prioritization.",`
`73`	`73`	`"items": {`
`74`	`74`	`"$ref": "#/$defs/rating"`
`75`	`75`	`}`