Skip to content

PD-2262 - CVSS v4 Integration - #162

Merged
rajan262 merged 9 commits into
masterfrom
PD-2262-cvss-v4-integration-changes
Jun 8, 2026
Merged

PD-2262 - CVSS v4 Integration#162
rajan262 merged 9 commits into
masterfrom
PD-2262-cvss-v4-integration-changes

Conversation

@Yibaebi

@Yibaebi Yibaebi commented May 25, 2026

Copy link
Copy Markdown
Contributor
Title Value
Type Feature / Refactor
Ticket/Issue PD-2262
Migrations No
Data Migration Scripts No
Seed DB No
ENV vars change No
Frontend (irene) No
CLI (appknox-go) No
On-premise (appknoxctl) No
Translations (vulnerabilities) No
Local testing Pending
Staging testing Pending
Documentation None
Release notes None
Version upgrade Minor

Changelog

  1. Add CVSS v4 enums to ak_vendor/enums.py:
    • AttackRequirementsEnum (N/P)
    • VulnerableSubsequentSystemImpactEnum (H/L/N — shared across VC, VI, VA, SC, SI, SA)
    • UserInteractionV4Enum (N/P/A — replaces v3 N/R)
  2. Refactor CVSSVersion class to inherit from str for easier comparisons
  3. Update CVSS metrics handling in ak_vendor/report/report.py to support both v3 and v4 metric structures, including correct base severity extraction for v4 vectors
  4. Update report template ak_vendor/templates/report_template.html to render CVSS v4 metrics table alongside legacy v3 metrics
  5. Update cvss dependency to >=3.6 in pyproject.toml
  6. Add Japanese translations for CVSS v4 metric labels in ak_vendor/locale/ja/LC_MESSAGES/django.po

Dependent PRs

@Yibaebi
Yibaebi force-pushed the PD-2262-cvss-v4-integration-changes branch from 063a297 to a46661c Compare May 28, 2026 16:31

@rajan262 rajan262 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good.

@Yibaebi
Yibaebi force-pushed the PD-2262-cvss-v4-integration-changes branch from a46661c to ec9fdfe Compare June 8, 2026 12:09
@rajan262
rajan262 merged commit dd93eab into master Jun 8, 2026
2 checks passed
@rajan262
rajan262 deleted the PD-2262-cvss-v4-integration-changes branch June 8, 2026 13:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants