{
  "openapi": "3.0.2",
  "info": {
    "version": "2.8.3",
    "title": "CVE Services API",
    "description": "The CVE Services API supports automation tooling for the CVE Program. Credentials are     required for most service endpoints. Representatives of     <a href='https://www.cve.org/ProgramOrganization/CNAs'>CVE Numbering Authorities (CNAs)</a> should     use one of the methods below to obtain credentials:    <ul><li>If your organization already has an Organizational Administrator (OA) account for the CVE     Services, ask your admin for credentials</li>     <li>Contact your Root (<a href='https://www.cve.org/PartnerInformation/ListofPartners/partner/Google'>Google</a>,     <a href='https://www.cve.org/PartnerInformation/ListofPartners/partner/INCIBE'>INCIBE</a>,     <a href='https://www.cve.org/PartnerInformation/ListofPartners/partner/jpcert'>JPCERT/CC</a>, or     <a href='https://www.cve.org/PartnerInformation/ListofPartners/partner/redhat'>Red Hat</a>) or     Top-Level Root (<a href='https://www.cve.org/PartnerInformation/ListofPartners/partner/icscert'>CISA ICS</a>     or <a href='https://www.cve.org/PartnerInformation/ListofPartners/partner/mitre'>MITRE</a>) to request credentials     </ul>     <p>CVE data is to be in the JSON 5.2 CVE Record format. Details of the JSON 5.2 schema are     located <a href='https://github.com/CVEProject/cve-schema/releases/tag/v5.2.0' target='_blank'>here</a>.</p>    <a href='https://cveform.mitre.org/' class='link' target='_blank'>Contact the CVE Services team</a>",
    "contact": {
      "name": "CVE Services Overview",
      "url": "https://www.cve.org/AllResources/CveServices"
    }
  },
  "servers": [
    {
      "url": "https://cveawg-dev.mitre.org/api"
    }
  ],
  "paths": {
    "/cve-id": {
      "get": {
        "tags": [
          "CVE ID"
        ],
        "summary": "Retrieves information about CVE IDs after applying the query parameters as filters (accessible to registered users, Secretariat, and Bulk Download)",
        "description": "  <h2>Access Control</h2>  <p>Registered users can access this endpoint. Secretariat and Bulk Download organizations can retrieve CVE IDs across organizations; other users are limited to CVE IDs owned by their own organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves filtered CVE IDs owned by the user's organization</p>  <p><b>Secretariat:</b> Retrieves filtered CVE IDs owned by any organization</p>  <p><b>Bulk Download:</b> Retrieves filtered CVE IDs owned by any organization with owner and requester details redacted</p>",
        "operationId": "cveIdGetFiltered",
        "parameters": [
          {
            "$ref": "#/components/parameters/cveIdGetFilteredState"
          },
          {
            "$ref": "#/components/parameters/cveIdGetFilteredCveIdYear"
          },
          {
            "$ref": "#/components/parameters/cveIdGetFilteredTimeReservedLt"
          },
          {
            "$ref": "#/components/parameters/cveIdGetFilteredTimeReservedGt"
          },
          {
            "$ref": "#/components/parameters/cveIdGetFilteredTimeModifiedLt"
          },
          {
            "$ref": "#/components/parameters/cveIdGetFilteredTimeModifiedGt"
          },
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "A filtered list of information about CVE IDs owned by the organization, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve-id/list-cve-ids-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "post": {
        "tags": [
          "CVE ID"
        ],
        "summary": "Reserves CVE IDs for the organization provided in the short_name query parameter (accessible to CNAs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>CNA</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>CNA:</b> Reserves CVE IDs for the CNA</p>  <p><b>Secretariat:</b> Reserves CVE IDs for any organization</p>",
        "operationId": "cveIdReserve",
        "parameters": [
          {
            "$ref": "#/components/parameters/amount"
          },
          {
            "$ref": "#/components/parameters/batch_type"
          },
          {
            "$ref": "#/components/parameters/cve_year"
          },
          {
            "$ref": "#/components/parameters/short_name"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "A list of the newly reserved CVE IDs",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve-id/create-cve-ids-response.json"
                }
              }
            }
          },
          "206": {
            "description": "A partial list of the CVE IDs the IDR service managed to reserve before encountering a case where no more CVE IDs could be reserved",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve-id/create-cve-ids-partial-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve-id/{id}": {
      "get": {
        "tags": [
          "CVE ID"
        ],
        "summary": "Retrieves information about the specified CVE ID (accessible to all users)",
        "description": "  <h2>Access Control</h2>  <p>Endpoint is accessible to all</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users: </b>Retrieves full information about a CVE ID owned by their organization; partial information about a CVE ID owned by other organizations</p>  <p><b>Unauthenticated Users: </b>Retrieves partial information about a CVE ID  <p><b>Secretariat: </b>Retrieves full information about a CVE ID owned by any organization</p>  <p><i><b>Note - </b>The owning organization of RESERVED CVE IDs is redacted for all users other than those in the owning organization or Secretariat</i></p>",
        "operationId": "cveIdGetSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The id of the CVE ID information to retrieve"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The requested CVE ID information is returned",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve-id/get-cve-id-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "429": {
            "description": "Too Many Requests",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "put": {
        "tags": [
          "CVE ID"
        ],
        "summary": "Updates information related to the specified CVE ID (accessible to CNAs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>CNA</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>CNA:</b> Updates information related to a CVE ID owned by the CNA</p>  <p><b>Secretariat:</b> Updates a CVE ID owned by any organization</p>",
        "operationId": "cveIdUpdateSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The id of the CVE ID to update"
          },
          {
            "$ref": "#/components/parameters/org"
          },
          {
            "$ref": "#/components/parameters/state"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The updated CVE ID information is returned",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve-id/update-cve-id-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve-id-range/{year}": {
      "post": {
        "tags": [
          "CVE ID"
        ],
        "summary": "Creates a CVE-ID-Range for the specified year (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Creates a CVE-ID-Range for the specified year</p>",
        "operationId": "cveIdRangeCreate",
        "parameters": [
          {
            "name": "year",
            "in": "path",
            "required": true,
            "schema": {
              "type": "integer"
            },
            "description": "The year of the CVE-ID-Range"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The CVE-ID-Range was created"
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve/{id}": {
      "get": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Returns a CVE Record by CVE ID (accessible to all users)",
        "description": "  <h2>Access Control</h2>  <p>Endpoint is accessible to all</p>  <h2>Expected Behavior</h2>  <p><b>All users:</b> Retrieves the CVE Record specified</p>",
        "operationId": "cveGetSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for the Record to be retrieved"
          }
        ],
        "responses": {
          "200": {
            "description": "The requested CVE Record",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "../schemas/cve/get-cve-record-response.json"
                    },
                    {
                      "$ref": "../schemas/cve/create-cve-record-rejection-response.json"
                    }
                  ]
                },
                "examples": {
                  "Published Record": {
                    "$ref": "#/components/examples/publishedRecord"
                  },
                  "Rejected Record": {
                    "$ref": "#/components/examples/rejectedRecord"
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "429": {
            "description": "Too Many Requests",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "headers": {
              "RateLimit-Limit": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the service limit associated with the client in the current time window. If the client exceeds that limit, it MAY not be served."
              },
              "RateLimit-Policy": {
                "schema": {
                  "type": "string"
                },
                "description": "Indicates a service policy currently associated with the client. Its value is informative."
              },
              "RateLimit-Remaining": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the remaining quota units associated with the expiring-limit. Clients MUST NOT assume that a positive remaining value is a guarantee that further requests will be served. When the value of the remaining keyword is low, it indicates that the server may soon throttle the client."
              },
              "RateLimit-Reset": {
                "schema": {
                  "type": "integer"
                },
                "description": "Indicates the number of seconds until the available quota units associated with the expiring-limit resets."
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "post": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Creates a CVE Record from full CVE Record JSON for the specified ID (accessible to Secretariat.)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Creates a CVE Record for any organization</p>",
        "operationId": "cveSubmit",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for the record being submitted"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The CVE Record created",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/create-cve-record-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/cve/create-cve-record-secretariat-request.json"
              }
            }
          }
        }
      },
      "put": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Updates a CVE Record from full CVE Record JSON for the specified ID (accessible to Secretariat.)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Updates a CVE Record for any organization</p>",
        "operationId": "cveUpdateSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for the record being updated"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The updated CVE Record",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/update-full-cve-record-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/cve/create-cve-record-secretariat-request.json"
              }
            }
          }
        }
      }
    },
    "/cve": {
      "get": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Retrieves all CVE Records after applying the query parameters as filters (accessible to Secretariat or Bulk Download)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> or <b>Bulk Download</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat and Bulk Download:</b> Retrieves all CVE records for all organizations</p>",
        "operationId": "cveGetFiltered",
        "parameters": [
          {
            "$ref": "#/components/parameters/cveRecordFilteredTimeModifiedLt"
          },
          {
            "$ref": "#/components/parameters/cveRecordFilteredTimeModifiedGt"
          },
          {
            "$ref": "#/components/parameters/cveRecordFilteredTimeCreatedLt"
          },
          {
            "$ref": "#/components/parameters/cveRecordFilteredTimeCreatedGt"
          },
          {
            "$ref": "#/components/parameters/cveState"
          },
          {
            "$ref": "#/components/parameters/countOnly"
          },
          {
            "$ref": "#/components/parameters/assignerShortName"
          },
          {
            "$ref": "#/components/parameters/assigner"
          },
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/cnaModified"
          },
          {
            "$ref": "#/components/parameters/adpShortName"
          }
        ],
        "responses": {
          "200": {
            "description": "A filtered list of CVE Records, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "../schemas/cve/list-cve-records-response.json"
                    },
                    {
                      "$ref": "../schemas/cve/create-cve-record-rejection-response.json"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Unauthorized"
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve_count": {
      "get": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Retrieves the count of all the CVE Records after applying the query parameters as filters (accessible to all users)",
        "description": "  <h2>Access Control</h2>  <p>Endpoint is accessible to all</p>  <h2>Expected Behavior</h2>  <p>Retrieves the count of all CVE records for all organizations</p>",
        "operationId": "cveGetFilteredCount",
        "parameters": [
          {
            "$ref": "#/components/parameters/cveState"
          }
        ],
        "responses": {
          "200": {
            "description": "A count of the total number of filtered CVE records",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/get-cve-record-count.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve_cursor": {
      "get": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Retrieves all CVE Records after applying the query parameters as filters. Uses cursor pagination to paginate results (accessible to Secretariat or Bulk Download)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> or <b>Bulk Download</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat and Bulk Download:</b> Retrieves all CVE records for all organizations</p>",
        "operationId": "cveGetFilteredCursor",
        "parameters": [
          {
            "$ref": "#/components/parameters/cveRecordFilteredTimeModifiedLt"
          },
          {
            "$ref": "#/components/parameters/cveRecordFilteredTimeModifiedGt"
          },
          {
            "$ref": "#/components/parameters/cveState"
          },
          {
            "$ref": "#/components/parameters/countOnly"
          },
          {
            "$ref": "#/components/parameters/assignerShortName"
          },
          {
            "$ref": "#/components/parameters/assigner"
          },
          {
            "$ref": "#/components/parameters/cnaModified"
          },
          {
            "$ref": "#/components/parameters/adpShortName"
          },
          {
            "$ref": "#/components/parameters/nextPage"
          },
          {
            "$ref": "#/components/parameters/previousPage"
          },
          {
            "$ref": "#/components/parameters/limit"
          }
        ],
        "responses": {
          "200": {
            "description": "A filtered list of CVE Records, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "../schemas/cve/cursor-cve-records-response.json"
                    },
                    {
                      "$ref": "../schemas/cve/create-cve-record-rejection-response.json"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Unauthorized"
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve/{id}/cna": {
      "post": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Creates a CVE Record from CNA Container JSON for the specified ID (accessible to CNAs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>CNA</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>CNA:</b> Creates CVE Record for a CVE ID owned by their organization</p>  <p><b>Secretariat:</b> Creates CVE Record for CVE IDs owned by any organization</p>",
        "operationId": "cveCnaCreateSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for the record being created"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          },
          {
            "$ref": "#/components/parameters/erlCheck"
          }
        ],
        "responses": {
          "200": {
            "description": "The CVE Record created",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/create-cve-record-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "description": "<h3>Notes:</h3>  <ul>  <li>**providerMetadata** is set by the server. If provided, it will be overwritten.</li>  <li>**datePublished** and **assignerShortname** are optional fields in the schema, but are set by the server. </li>  </ul>",
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/cve/create-cve-record-cna-request.json"
              },
              "examples": {
                "Required Fields Only Request": {
                  "$ref": "#/components/examples/minCnaContainer"
                },
                "All Fields Request": {
                  "$ref": "../schemas/cve/create-cve-record-cna-request.json"
                }
              }
            }
          }
        }
      },
      "put": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Updates the CVE Record from CNA Container JSON for the specified ID (accessible to CNAs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>CNA</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>CNA:</b> Updates a CVE Record for records that are owned by their organization</p>  <p><b>Secretariat:</b> Updates a CVE Record for records that are owned by any organization</p>",
        "operationId": "cveCnaUpdateSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for which the record is being updated"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          },
          {
            "$ref": "#/components/parameters/erlCheck"
          }
        ],
        "responses": {
          "200": {
            "description": "The updated CVE Record",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/update-full-cve-record-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "description": "<h3>Notes:</h3>  <ul>  <li>When updating a rejected record to published, it is recommended to confirm that both the Cve-Id and CVE record are in the correct state after calling this endpoint. Though very unlikely, a race condition can occur causing the two states to be out of sync. </li>  <li>**providerMetadata** is set by the server. If provided, it will be overwritten.</li>  <li>**datePublished** and **assignerShortname** are optional fields in the schema, but are set by the server. </li>  </ul>",
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/cve/create-cve-record-cna-request.json"
              },
              "examples": {
                "Required Fields Only Request": {
                  "$ref": "#/components/examples/minCnaContainer"
                },
                "All Fields Request": {
                  "$ref": "../schemas/cve/create-cve-record-cna-request.json"
                }
              }
            }
          }
        }
      }
    },
    "/cve/{id}/reject": {
      "post": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Creates a rejected CVE Record for the specified ID if no record yet exists (accessible to CNAs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>CNA</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>CNA:</b> Creates a rejected CVE Record for a record owned by their organization</p>  <p><b>Secretariat:</b> Creates a rejected CVE Record for a record owned by any organization</p>",
        "operationId": "cveCnaCreateReject",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for the record being rejected"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The rejected CVE Record",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/create-cve-record-rejection-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "description": "<h3>Notes:</h3>  <ul>  <li>**providerMetadata** is set by the server. If provided, it will be overwritten.</li>  <li>**datePublished** and **assignerShortname** are optional fields in the schema, but are set by the server. </li>  </ul>",
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/cve/create-cve-record-rejection-request.json"
              }
            }
          }
        }
      },
      "put": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Updates an existing CVE Record with a rejected record for the specified ID (accessible to CNAs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>CNA</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>CNA:</b> Updates a rejected CVE Record for a record owned by their organization</p>  <p><b>Secretariat:</b> Updates a rejected CVE Record for a record owned by any organization</p>",
        "operationId": "cveCnaUpdateReject",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for the record being rejected"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The rejected CVE Record",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/cve/update-cve-record-rejection-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "description": "<h3>Notes:</h3>  <ul>  <li>It is recommended to confirm that both the Cve-Id and CVE record are in the REJECTED state after calling this endpoint. Though very unlikely, a race condition can occur causing the two states to be out of sync. </li>  <li>**providerMetadata** is set by the server. If provided, it will be overwritten.</li>  <li>**datePublished** and **assignerShortname** are optional fields in the schema, but are set by the server. </li>  </ul>",
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/cve/update-cve-record-rejection-request.json"
              }
            }
          }
        }
      }
    },
    "/cve/{id}/adp": {
      "put": {
        "tags": [
          "CVE Record"
        ],
        "summary": "Updates the CVE Record from ADP Container JSON for the specified ID (accessible to ADPs and Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>ADP</b> or <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>ADP:</b> Updates a CVE Record for records that are owned by any organization</p>  <p><b>Secretariat:</b> Updates a CVE Record for records that are owned by any organization</p>",
        "operationId": "cveAdpUpdateSingle",
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The CVE ID for which the record is being updated"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "The updated CVE Record",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "/schemas/cve/update-full-cve-record-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "/schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "/schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "/schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "/schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "/schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "description": "Note: providerMetadata is set by the server. If provided, it will be overwritten.",
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "/schemas/cve/create-adp-record-adp-request.json"
              }
            }
          }
        }
      }
    },
    "/org": {
      "get": {
        "tags": [
          "Organization"
        ],
        "summary": "Retrieves all organizations (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Retrieves information about all organizations</p>",
        "operationId": "orgAll",
        "parameters": [
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about all organizations, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "../schemas/org/list-orgs-response.json"
                    },
                    {
                      "$ref": "../schemas/registry-org/list-registry-orgs-response.json"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "post": {
        "tags": [
          "Organization"
        ],
        "summary": "Creates an organization as specified in the request body (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Creates an organization</p>  ",
        "operationId": "orgCreateSingle",
        "parameters": [
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about the organization created",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "../schemas/org/create-org-response.json"
                    },
                    {
                      "$ref": "../schemas/registry-org/create-registry-org-response.json"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/org/create-org-request.json"
              }
            }
          }
        }
      }
    },
    "/org/{identifier}": {
      "get": {
        "tags": [
          "Organization"
        ],
        "summary": "Retrieves information about the organization specified by short name or UUID (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for their own organization. Secretariat users can access any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves organization record for the specified shortname or UUID if it is the user's organization</p>  <p><b>Secretariat:</b> Retrieves information about any organization</p>",
        "operationId": "orgSingle",
        "parameters": [
          {
            "name": "identifier",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname or UUID of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the organization information",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/org/get-org-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/org/{shortname}": {
      "put": {
        "tags": [
          "Organization"
        ],
        "summary": "Updates information about the organization specified by short name (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Updates any organization's information</p>",
        "operationId": "orgUpdateSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/id_quota"
          },
          {
            "$ref": "#/components/parameters/name"
          },
          {
            "$ref": "#/components/parameters/newShortname"
          },
          {
            "$ref": "#/components/parameters/active_roles_add"
          },
          {
            "$ref": "#/components/parameters/active_roles_remove"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about the organization updated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/org/update-org-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/org/{shortname}/id_quota": {
      "get": {
        "tags": [
          "Organization"
        ],
        "summary": "Retrieves an organization's CVE ID quota (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for their own organization. Secretariat users can access any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves the CVE ID quota for the user's organization</p>  <p><b>Secretariat:</b> Retrieves the CVE ID quota for any organization</p>",
        "operationId": "orgIdQuota",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the CVE ID quota for an organization",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/org/get-org-quota-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/org/{shortname}/users": {
      "get": {
        "tags": [
          "Users"
        ],
        "summary": "Retrieves all users for the organization with the specified short name (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for their own organization. Secretariat users can access any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves information about users in the same organization</p>  <p><b>Secretariat:</b> Retrieves all user information for any organization</p>",
        "operationId": "userOrgAll",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns all users for the organization, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/list-users-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/org/{shortname}/user": {
      "post": {
        "tags": [
          "Users"
        ],
        "summary": "Create a user with the provided short name as the owning organization (accessible to Secretariat or target organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be an <b>Admin</b> of the target organization</p>  <h2>Expected Behavior</h2>  <p><b>Admin User:</b> Creates a user for the Admin's organization</p>  <p><b>Secretariat:</b> Creates a user for any organization</p>",
        "operationId": "userCreateSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the new user information (with the secret)",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/create-user-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/user/create-user-request.json"
              }
            }
          }
        }
      }
    },
    "/org/{shortname}/user/{username}": {
      "get": {
        "tags": [
          "Users"
        ],
        "summary": "Retrieves information about a user for the specified username and organization short name (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for users in their own organization. Secretariat users can access any user.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves information about a user in the same organization</p>  <p><b>Secretariat:</b> Retrieves any user's information</p>",
        "operationId": "userSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about the specified user",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/get-user-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "put": {
        "tags": [
          "Users"
        ],
        "summary": "Updates information about a user for the specified username and organization shortname (accessible to self, same-organization Admins, or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can update their own name fields. Organization admins can update users in their organization. Secretariat users can update users in any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular User:</b> Updates the user's own information. Only name fields may be changed.</p>  <p><b>Admin User:</b> Updates information about a user in the Admin's organization. Allowed to change all fields except org_short_name. </p>  <p><b>Secretariat:</b> Updates information about a user in any organization. Allowed to change all fields.</p>",
        "operationId": "userUpdateSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/active"
          },
          {
            "$ref": "#/components/parameters/activeUserRolesAdd"
          },
          {
            "$ref": "#/components/parameters/activeUserRolesRemove"
          },
          {
            "$ref": "#/components/parameters/nameFirst"
          },
          {
            "$ref": "#/components/parameters/nameLast"
          },
          {
            "$ref": "#/components/parameters/nameMiddle"
          },
          {
            "$ref": "#/components/parameters/nameSuffix"
          },
          {
            "$ref": "#/components/parameters/newUsername"
          },
          {
            "$ref": "#/components/parameters/orgShortname"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the updated user information",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/update-user-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/org/{shortname}/user/{username}/reset_secret": {
      "put": {
        "tags": [
          "Users"
        ],
        "summary": "Reset the API key for a user (accessible to self, same-organization Admins, or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can reset their own API secret. Organization admins can reset users in their organization. Secretariat users can reset any user's API secret.</p>  <h2>Expected Behavior</h2>  <p><b>Regular User:</b> Resets user's own API secret</p>  <p><b>Admin User:</b> Resets any user's API secret in the Admin's organization</p>  <p><b>Secretariat:</b> Resets any user's API secret</p>",
        "operationId": "userResetSecret",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the new API key",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/reset-secret-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/users": {
      "get": {
        "tags": [
          "Users"
        ],
        "summary": "Retrieves information about all registered users (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p> User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Retrieves information about all users for all organizations</p>",
        "operationId": "userAll",
        "parameters": [
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns all users, along with pagination fields if results span multiple pages of data.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/list-users-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/health-check": {
      "get": {
        "tags": [
          "Utilities"
        ],
        "summary": "Checks that the system is running (accessible to all users)",
        "description": "  <h2>Access Control</h2>  <p>Endpoint is accessible to all</p>  <h2>Expected Behavior</h2>  <p>Returns a 200 response code when CVE Services are running</p>",
        "operationId": "healthCheck",
        "responses": {
          "200": {
            "description": "Returns a 200 response code"
          }
        }
      }
    },
    "/registry/org": {
      "get": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Retrieves all registry organizations (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Retrieves information about all registry organizations</p>",
        "operationId": "registryOrgAll",
        "parameters": [
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about all registry organizations, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-org/list-registry-orgs-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "post": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Creates an organization (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Creates a new organization</p>",
        "operationId": "registryOrgCreateSingle",
        "parameters": [
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about all organizations, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-org/list-registry-orgs-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "anyOf": [
                  {
                    "$ref": "../schemas/registry-org/SecretariatOrg.json"
                  },
                  {
                    "$ref": "../schemas/registry-org/CNAOrg.json"
                  },
                  {
                    "$ref": "../schemas/registry-org/ADPOrg.json"
                  },
                  {
                    "$ref": "../schemas/registry-org/BulkDownloadOrg.json"
                  }
                ]
              },
              "example": {
                "short_name": "fake_company",
                "long_name": "Fake Company",
                "id_quota": 1000,
                "authority": [
                  "CNA"
                ]
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/users": {
      "get": {
        "tags": [
          "Registry User"
        ],
        "summary": "Retrieves all users for the organization with the specified short name (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for their own organization. Secretariat users can access any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves information about users in the same organization</p>  <p><b>Secretariat:</b> Retrieves all user information for any organization</p>",
        "operationId": "registryOrgUsersAll",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns all users for the organization, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-user/list-registry-users-response.json"
                },
                "example": {
                  "totalCount": 1,
                  "itemsPerPage": 100,
                  "pageCount": 1,
                  "currentPage": 1,
                  "prevPage": null,
                  "nextPage": null,
                  "users": [
                    {
                      "UUID": "fe566221-6a2c-4279-8800-4d3795325997",
                      "username": "jdoe",
                      "name": {
                        "first": "John",
                        "last": "Doe"
                      },
                      "role": "ADMIN",
                      "status": "active",
                      "created": "2021-02-12T17:15:37.382Z",
                      "last_updated": "2021-02-12T17:15:37.382Z"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/id_quota": {
      "get": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Retrieves an organization's CVE ID quota (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for their own organization. Secretariat users can access any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves the CVE ID quota for the user's organization</p>  <p><b>Secretariat:</b> Retrieves the CVE ID quota for any organization</p>",
        "operationId": "registryOrgIdQuota",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the CVE ID quota for an organization",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-org/get-registry-org-quota-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{identifier}": {
      "get": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Retrieves information about the registry organization specified by short name or UUID (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for their own organization. Secretariat users can access any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves registry organization record for the specified shortname or UUID if it is the user's organization</p>  <p><b>Secretariat:</b> Retrieves information about any registry organization</p>",
        "operationId": "registryOrgSingle",
        "parameters": [
          {
            "name": "identifier",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname or UUID of the registry organization"
          },
          {
            "name": "expand",
            "in": "query",
            "description": "Optional expanded related data. Accepted value: users.",
            "required": false,
            "schema": {
              "type": "object",
              "properties": {
                "type": {
                  "type": "string",
                  "example": "string"
                },
                "enum": {
                  "type": "array",
                  "example": [
                    "users"
                  ],
                  "items": {
                    "type": "string"
                  }
                }
              }
            }
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the registry organization information",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-org/get-registry-org-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/user/{username}": {
      "get": {
        "tags": [
          "Registry User"
        ],
        "summary": "Retrieves information about a user for the specified username and organization short name (accessible to same-organization users or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can access this endpoint only for users in their own organization. Secretariat users can access any user.</p>  <h2>Expected Behavior</h2>  <p><b>Regular, CNA & Admin Users:</b> Retrieves information about a registry user in the same organization</p>  <p><b>Secretariat:</b> Retrieves any registry user's information</p>",
        "operationId": "registryUserSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about the specified registry user",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-user/get-registry-user-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "put": {
        "tags": [
          "Registry User"
        ],
        "summary": "Updates information about a user for the specified username and organization shortname (accessible to self, same-organization Admins, or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can update their own name fields. Organization admins can update users in their organization. Secretariat users can update users in any organization.</p>  <h2>Expected Behavior</h2>  <p><b>Regular User:</b> Updates the user's own information. Only name fields may be changed.</p>  <p><b>Admin User:</b> Updates information about a user in the Admin's organization. Allowed to change all fields except org_short_name. </p>  <p><b>Secretariat:</b> Updates information about a user in any organization. Allowed to change all fields.</p>",
        "operationId": "registryUserUpdateSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/active"
          },
          {
            "$ref": "#/components/parameters/orgShortname"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the updated user information",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-user/update-registry-user-response.json"
                },
                "example": {
                  "message": "jdoe was successfully updated.",
                  "updated": {
                    "UUID": "fe566221-6a2c-4279-8800-4d3795325997",
                    "username": "jdoe",
                    "name": {
                      "first": "John",
                      "last": "Doe"
                    },
                    "status": "active",
                    "created": "2021-02-12T17:15:37.382Z",
                    "last_updated": "2021-02-12T17:15:37.382Z"
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "delete": {
        "tags": [
          "Registry User"
        ],
        "summary": "Deletes the registry user specified by organization and username (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Deletes the specified user from the specified organization</p>",
        "operationId": "registryUserDeleteSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Confirms deletion of the registry user",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-user/delete-registry-user-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}": {
      "put": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Updates information about the organization specified by short name (accessible to Secretariat or same-organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be an <b>Admin</b> of the requested organization.</p>  <p>With Joint Approval required for the following fields:</p>  <h2>Expected Behavior</h2>  <b>This endpoint expects a full organization object in the request body.</b>  <p><b>Secretariat:</b> Updates any organization's information</p>  <p><b>Organization Admin:</b> Requests changes to its organization's information</p>  <ul>  <li>short_name</li>  <li>long_name</li>  <li>authority</li>  <li>aliases</li>  <li>oversees</li>  <li>top_level_root</li>  <li>charter_or_scope</li>  <li>product_list</li>  <li>disclosure_policy</li>  <li>contact_info.websites</li>  <li>contact_info.emails</li>  <li>contact_info.phone</li>  <li>partner_role_type</li>  <li>partner_country</li>  <li>advisory_locations</li>  <li>advisory_location_require_credentials</li>  <li>vulnerability_advisory_location_for_web_scraping</li>  <li>industry</li>  <li>tl_root_start_date</li>  <li>is_cna_discussion_list</li>  </ul>",
        "operationId": "registryOrgUpdateSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns information about the organization updated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-org/update-registry-org-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/registry-org/update-registry-org-request.json"
              },
              "example": {
                "short_name": "fake_company",
                "long_name": "Fake Company",
                "id_quota": 1000,
                "authority": [
                  "CNA"
                ]
              }
            }
          }
        }
      },
      "delete": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Deletes the registry organization specified by short name (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Deletes the specified registry organization</p>",
        "operationId": "registryOrgDeleteSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the registry organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Confirms deletion of the registry organization",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-org/delete-registry-org-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/user": {
      "post": {
        "tags": [
          "Registry User"
        ],
        "summary": "Create a user with the provided short name as the owning organization (accessible to Secretariat or target organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be an <b>Admin</b> of the target organization</p>  <h2>Expected Behavior</h2>  <p><b>Admin User:</b> Creates a user for the Admin's organization</p>  <p><b>Secretariat:</b> Creates a user for any organization</p>",
        "operationId": "registryUserCreateSingle",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the new user information (with the secret)",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-user/create-registry-user-response.json"
                }
              },
              "example": {
                "message": "jdoe was successfully created.",
                "created": {
                  "UUID": "fe566221-6a2c-4279-8800-4d3795325997",
                  "username": "jdoe",
                  "name": {
                    "first": "John",
                    "last": "Doe"
                  },
                  "status": "active",
                  "secret": "12345-abcde-67890",
                  "created": "2021-02-12T17:15:37.382Z",
                  "last_updated": "2021-02-12T17:15:37.382Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "../schemas/registry-user/create-registry-user-request.json"
              }
            },
            "example": {
              "username": "jdoe",
              "status": "active",
              "name": {
                "first": "John",
                "last": "Doe"
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/user/{username}/reset_secret": {
      "put": {
        "tags": [
          "Registry User"
        ],
        "summary": "Reset the API key for a user (accessible to self, same-organization Admins, or Secretariat)",
        "description": "  <h2>Access Control</h2>  <p>Authenticated users can reset their own API secret. Organization admins can reset users in their organization. Secretariat users can reset any user's API secret.</p>  <h2>Expected Behavior</h2>  <p><b>Regular User:</b> Resets user's own API secret</p>  <p><b>Admin User:</b> Resets any user's API secret in the Admin's organization</p>  <p><b>Secretariat:</b> Resets any user's API secret</p>",
        "operationId": "registryUserResetSecret",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the new API key",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/user/reset-secret-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/oversees/{shortname2}/add": {
      "post": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Assigns an organization to report to a ROOT organization (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role.</p>  <h2>Expected Behavior</h2>  <p>The organization identified by <b>shortname</b> must have <b>ROOT</b> authority. The organization identified by <b>shortname2</b> will  report to it. If <b>shortname2</b> already reported to a different <b>ROOT</b>. It will be removed from that and both will receive an audit entry.</p>",
        "operationId": "registryOrgAddOverseeRelationship",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the overseeing ROOT organization"
          },
          {
            "name": "shortname2",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the reporting organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Reports-to relationship added successfully",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "message": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/oversees/{shortname2}/remove": {
      "post": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Removes an organization reports-to relationship (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role.</p>  <h2>Expected Behavior</h2>  <p>The organization identified by <b>shortname</b> must have <b>ROOT</b> authority. The organization identified by <b>shortname2</b> will no longer report to it.</p>",
        "operationId": "registryOrgRemoveOverseeRelationship",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the overseeing ROOT organization"
          },
          {
            "name": "shortname2",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the reporting organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Reports-to relationship removed successfully",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "message": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/user/{username}/grant-role": {
      "post": {
        "tags": [
          "Registry User"
        ],
        "summary": "Grants a role to a user (accessible to Secretariat or Org Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be an <b>Admin</b> of the target organization</p>  <h2>Expected Behavior</h2>  <p><b>Admin User:</b> Grants a role to a user in the Admin's organization</p>  <p><b>Secretariat:</b> Grants a role to a user in any organization</p>",
        "operationId": "registryUserGrantRole",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Role granted successfully",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "message": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "role": {
                    "type": "string",
                    "enum": [
                      "ADMIN"
                    ]
                  }
                },
                "required": [
                  "role"
                ]
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/user/{username}/revoke-role": {
      "post": {
        "tags": [
          "Registry User"
        ],
        "summary": "Revokes a role from a user (accessible to Secretariat or Org Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be an <b>Admin</b> of the target organization</p>  <h2>Expected Behavior</h2>  <p><b>Admin User:</b> Revokes a role from a user in the Admin's organization</p>  <p><b>Secretariat:</b> Revokes a role from a user in any organization</p>",
        "operationId": "registryUserRevokeRole",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "username",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The username of the user"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Role revoked successfully",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "message": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "role": {
                    "type": "string",
                    "enum": [
                      "ADMIN"
                    ]
                  }
                },
                "required": [
                  "role"
                ]
              }
            }
          }
        }
      }
    },
    "/registry/org/{shortname}/conversation/{index}": {
      "put": {
        "tags": [
          "Registry Organization"
        ],
        "summary": "Update the conversation at the given index for the given organization (accessible to Secretariat or original same-organization author)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be the original author of the conversation in the same organization</p>  <h2>Expected Behavior</h2>  <p><b>Original Author:</b> Allowed to update only the message body of a conversation posted by them</p>  <p><b>Secretariat:</b> Allowed to update the message body and/or visibility of any conversation</p>",
        "operationId": "registryOrgUpdateConversation",
        "parameters": [
          {
            "name": "shortname",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The shortname of the organization"
          },
          {
            "name": "index",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The index of the conversation to update"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the updated conversation",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/conversation/update-conversation-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/registry/users": {
      "get": {
        "tags": [
          "Registry User"
        ],
        "summary": "Retrieves information about all registered users (accessible to Secretariat)",
        "description": "  <h2>Access Control</h2>  <p> User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Retrieves information about all users for all organizations</p>",
        "operationId": "registryUserAll",
        "parameters": [
          {
            "$ref": "#/components/parameters/pageQuery"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns all users, along with pagination fields if results span multiple pages of data.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/registry-user/list-registry-users-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/conversation": {
      "get": {
        "tags": [
          "Conversation"
        ],
        "summary": "Retrieves all conversations (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Retrieves all conversations</p>",
        "operationId": "getAllConversations",
        "parameters": [
          {
            "name": "page",
            "in": "query",
            "description": "The page of the conversation to retrieve",
            "schema": {
              "type": "integer"
            }
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns all conversations, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/conversation/list-conversations-response.json"
                },
                "example": {
                  "totalCount": 1,
                  "itemsPerPage": 10,
                  "pageCount": 1,
                  "currentPage": 1,
                  "prevPage": null,
                  "nextPage": null,
                  "conversations": [
                    {
                      "UUID": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                      "target_uuid": "123e4567-e89b-12d3-a456-426614174000",
                      "author_id": "fe566221-6a2c-4279-8800-4d3795325997",
                      "author_name": "John Doe",
                      "body": "This is a conversation message.",
                      "posted_at": "2021-02-12T17:15:37.382Z"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/conversation/target/{uuid}": {
      "get": {
        "tags": [
          "Conversation"
        ],
        "summary": "Retrieves all conversations for a specific target UUID (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Retrieves all conversations for the specified target UUID</p>",
        "operationId": "getConversationsForTargetUUID",
        "parameters": [
          {
            "name": "uuid",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The UUID of the target entity"
          },
          {
            "name": "page",
            "in": "query",
            "description": "The page of the conversation to retrieve",
            "schema": {
              "type": "integer"
            }
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns all conversations for the target UUID, along with pagination fields if results span multiple pages of data",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/conversation/list-conversations-response.json"
                },
                "example": {
                  "totalCount": 1,
                  "itemsPerPage": 10,
                  "pageCount": 1,
                  "currentPage": 1,
                  "prevPage": null,
                  "nextPage": null,
                  "conversations": [
                    {
                      "UUID": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                      "target_uuid": "123e4567-e89b-12d3-a456-426614174000",
                      "author_id": "fe566221-6a2c-4279-8800-4d3795325997",
                      "author_name": "John Doe",
                      "body": "This is a conversation message.",
                      "posted_at": "2021-02-12T17:15:37.382Z"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      },
      "post": {
        "tags": [
          "Conversation"
        ],
        "summary": "Creates a conversation for a specific target UUID (accessible to Secretariat or target organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or be an <b>Admin</b> of the target organization</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Creates a conversation for the specified target UUID</p>  <p><b>Organization Admin:</b> Creates a conversation only when the target UUID is the admin's organization UUID</p>",
        "operationId": "createConversationForTargetUUID",
        "parameters": [
          {
            "name": "uuid",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The UUID of the target entity"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the created conversation",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/conversation/conversation.json"
                },
                "example": {
                  "UUID": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                  "target_uuid": "123e4567-e89b-12d3-a456-426614174000",
                  "author_id": "fe566221-6a2c-4279-8800-4d3795325997",
                  "author_name": "John Doe",
                  "body": "This is a conversation message.",
                  "posted_at": "2021-02-12T17:15:37.382Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "body": {
                    "type": "string",
                    "description": "The content of the conversation message"
                  }
                },
                "required": [
                  "body"
                ]
              },
              "example": {
                "body": "This is a conversation message."
              }
            }
          }
        }
      }
    },
    "/conversation/{uuid}": {
      "put": {
        "tags": [
          "Conversation"
        ],
        "summary": "Updates a conversation by UUID (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>  <h2>Expected Behavior</h2>  <p><b>Secretariat:</b> Updates the conversation with the specified UUID</p>",
        "operationId": "updateConversationByUUID",
        "parameters": [
          {
            "name": "uuid",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The UUID of the conversation to update"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the updated conversation",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/conversation/conversation.json"
                },
                "example": {
                  "UUID": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                  "target_uuid": "123e4567-e89b-12d3-a456-426614174000",
                  "author_id": "fe566221-6a2c-4279-8800-4d3795325997",
                  "author_name": "John Doe",
                  "body": "This is an updated conversation message.",
                  "visibility": "public",
                  "posted_at": "2021-02-12T17:15:37.382Z",
                  "edited_at": "2021-02-12T17:20:00.000Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "body": {
                    "type": "string",
                    "description": "The updated content of the conversation message"
                  },
                  "visibility": {
                    "type": "string",
                    "enum": [
                      "private",
                      "public"
                    ],
                    "description": "The updated visibility of the conversation message"
                  }
                }
              },
              "example": {
                "body": "This is an updated conversation message.",
                "visibility": "public"
              }
            }
          }
        }
      }
    },
    "/review/byUUID/{uuid}": {
      "get": {
        "tags": [
          "Review Object"
        ],
        "summary": "Retrieves a review object by its UUID (accessible to Secretariat or same-organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or have the <b>Admin</b> role for the review object's target organization</p>",
        "operationId": "getReviewObjectByUUID",
        "parameters": [
          {
            "name": "uuid",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The UUID of the review object"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the review object",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/review/review.json"
                },
                "example": {
                  "uuid": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                  "target_object_uuid": "123e4567-e89b-12d3-a456-426614174000",
                  "status": "PENDING",
                  "new_review_data": {
                    "name": "New Organization Name"
                  },
                  "created": "2021-02-12T17:15:37.382Z",
                  "last_updated": "2021-02-12T17:15:37.382Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/review/org/{identifier}": {
      "get": {
        "tags": [
          "Review Object"
        ],
        "summary": "Retrieves the PENDING review object for an organization (accessible to Secretariat or same-organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or have the <b>Admin</b> role for the requested organization</p>",
        "operationId": "getReviewObjectByOrgIdentifier",
        "parameters": [
          {
            "name": "identifier",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The short name or UUID of the organization"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the pending review object",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/review/review.json"
                },
                "example": {
                  "uuid": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                  "target_object_uuid": "123e4567-e89b-12d3-a456-426614174000",
                  "status": "PENDING",
                  "new_review_data": {
                    "name": "New Organization Name"
                  },
                  "created": "2021-02-12T17:15:37.382Z",
                  "last_updated": "2021-02-12T17:15:37.382Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/review/orgs": {
      "get": {
        "tags": [
          "Review Object"
        ],
        "summary": "Retrieves all review objects (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>",
        "operationId": "getAllReviewObjects",
        "parameters": [
          {
            "name": "page",
            "in": "query",
            "description": "The page of results to retrieve",
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "status",
            "in": "query",
            "description": "Filter by review object status",
            "schema": {
              "type": "string"
            }
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns a list of review objects",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/review/list-reviews-response.json"
                },
                "example": {
                  "totalCount": 1,
                  "itemsPerPage": 100,
                  "pageCount": 1,
                  "currentPage": 1,
                  "prevPage": null,
                  "nextPage": null,
                  "reviews": [
                    {
                      "uuid": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                      "target_object_uuid": "123e4567-e89b-12d3-a456-426614174000",
                      "status": "PENDING",
                      "new_review_data": {
                        "name": "New Organization Name"
                      },
                      "created": "2021-02-12T17:15:37.382Z",
                      "last_updated": "2021-02-12T17:15:37.382Z"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/review/org/{identifier}/reviews": {
      "get": {
        "tags": [
          "Review Object"
        ],
        "summary": "Retrieves the review history for an organization (accessible to Secretariat or same-organization Admin)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or have the <b>Admin</b> role for the requested organization</p>",
        "operationId": "getReviewHistoryByOrgShortNamePaginated",
        "parameters": [
          {
            "name": "identifier",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The short name of the organization"
          },
          {
            "name": "page",
            "in": "query",
            "description": "The page of results to retrieve",
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "include_conversations",
            "in": "query",
            "description": "Whether to include conversation history",
            "schema": {
              "type": "boolean"
            }
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the review history",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/review/list-reviews-response.json"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    },
    "/review/{uuid}": {
      "put": {
        "tags": [
          "Review Object"
        ],
        "summary": "Updates a review object (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>",
        "operationId": "updateReviewObjectByReviewUUID",
        "parameters": [
          {
            "name": "uuid",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The UUID of the review object"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the updated review object",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/review/review.json"
                },
                "example": {
                  "uuid": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                  "target_object_uuid": "123e4567-e89b-12d3-a456-426614174000",
                  "status": "PENDING",
                  "new_review_data": {
                    "name": "New Organization Name"
                  },
                  "created": "2021-02-12T17:15:37.382Z",
                  "last_updated": "2021-02-12T17:15:37.382Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "description": "The updated review data"
              },
              "example": {
                "new_review_data": {
                  "name": "New Organization Name"
                }
              }
            }
          }
        }
      }
    },
    "/review/{uuid}/reject": {
      "put": {
        "tags": [
          "Review Object"
        ],
        "summary": "Rejects a review object (accessible to Secretariat only)",
        "description": "  <h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role</p>",
        "operationId": "rejectReviewObject",
        "parameters": [
          {
            "name": "uuid",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "The UUID of the review object"
          },
          {
            "$ref": "#/components/parameters/apiEntityHeader"
          },
          {
            "$ref": "#/components/parameters/apiUserHeader"
          },
          {
            "$ref": "#/components/parameters/apiSecretHeader"
          }
        ],
        "responses": {
          "200": {
            "description": "Returns the rejected review object",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/review/review.json"
                },
                "example": {
                  "uuid": "c8a41738-f9d6-4447-9755-9ab0101b7a2d",
                  "target_object_uuid": "123e4567-e89b-12d3-a456-426614174000",
                  "status": "PENDING",
                  "new_review_data": {
                    "name": "New Organization Name"
                  },
                  "created": "2021-02-12T17:15:37.382Z",
                  "last_updated": "2021-02-12T17:15:37.382Z"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/bad-request.json"
                }
              }
            }
          },
          "401": {
            "description": "Not Authenticated",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "404": {
            "description": "Not Found",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "../schemas/errors/generic.json"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "parameters": {
      "active": {
        "in": "query",
        "name": "active",
        "description": "The new active state for the user entry.  Accepted values are 1, true, or yes to indicate true, and 0, false, or no to indicate false",
        "required": false,
        "schema": {
          "type": "boolean"
        }
      },
      "active_roles_add": {
        "in": "query",
        "name": "active_roles.add",
        "description": "Add an active role to the organization",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "CNA",
            "SECRETARIAT"
          ]
        }
      },
      "active_roles_remove": {
        "in": "query",
        "name": "active_roles.remove",
        "description": "Remove an active role from the organization",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "CNA",
            "SECRETARIAT"
          ]
        }
      },
      "activeUserRolesAdd": {
        "in": "query",
        "name": "active_roles.add",
        "description": "Add an active role to the user",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "ADMIN"
          ]
        }
      },
      "activeUserRolesRemove": {
        "in": "query",
        "name": "active_roles.remove",
        "description": "Remove an active role from the user",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "ADMIN"
          ]
        }
      },
      "apiEntityHeader": {
        "in": "header",
        "name": "CVE-API-ORG",
        "description": "The shortname for the organization associated with the user requesting authentication",
        "required": true,
        "schema": {
          "type": "string"
        }
      },
      "apiUserHeader": {
        "in": "header",
        "name": "CVE-API-USER",
        "description": "The username for the account making the request",
        "required": true,
        "schema": {
          "type": "string"
        }
      },
      "apiSecretHeader": {
        "in": "header",
        "name": "CVE-API-KEY",
        "description": "The user's API key",
        "required": true,
        "schema": {
          "type": "string"
        }
      },
      "amount": {
        "in": "query",
        "name": "amount",
        "description": "Quantity of CVE IDs to reserve",
        "required": true,
        "schema": {
          "type": "integer",
          "format": "int32"
        }
      },
      "assigner": {
        "in": "query",
        "name": "assigner",
        "description": "Filter by assigner org UUID",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "assignerShortName": {
        "in": "query",
        "name": "assigner_short_name",
        "description": "Filter by assignerShortName",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "erlCheck": {
        "in": "query",
        "name": "erlcheck",
        "description": "Enables stricter validation that ensures submitted record meets enrichment data requirements. For a record to be enriched, a CVSS score and a CWE ID must be provided.",
        "required": false,
        "schema": {
          "type": "boolean"
        }
      },
      "batch_type": {
        "in": "query",
        "name": "batch_type",
        "description": "Required when amount is greater than one, determines whether the reserved CVE IDs should be sequential or non-sequential",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "sequential",
            "non-sequential",
            "nonsequential"
          ]
        }
      },
      "countOnly": {
        "in": "query",
        "name": "count_only",
        "description": "Get count of records that match query. Accepted values are 1, true, or yes to indicate true, and 0, false, or no to indicate false",
        "required": false,
        "schema": {
          "type": "boolean"
        }
      },
      "nextPage": {
        "in": "query",
        "name": "next_page",
        "description": "Key returned by a GET /cve_cursor call that must be used to get the next page of results in a subsequent call",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "previousPage": {
        "in": "query",
        "name": "previous_page",
        "description": "Key returned by a GET /cve_cursor call that must be used to get the previous page of results in a subsequent call",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "limit": {
        "in": "query",
        "name": "limit",
        "description": "CVE records to return per page. Must be between 1-500. ",
        "required": false,
        "schema": {
          "type": "integer"
        }
      },
      "cnaModified": {
        "in": "query",
        "name": "cna_modified",
        "description": "Only get CVE records with cnaContainers that have been modified/created within the set time_modified range. Requires at least one time_modified parameter set",
        "required": false,
        "schema": {
          "type": "boolean"
        }
      },
      "adpShortName": {
        "in": "query",
        "name": "adp_short_name",
        "description": "Only get CVE records that have an adpContainer owned by this org.",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "cveState": {
        "in": "query",
        "name": "state",
        "description": "Filter by state",
        "schema": {
          "type": "string",
          "enum": [
            "PUBLISHED",
            "REJECTED"
          ]
        }
      },
      "cve_year": {
        "in": "query",
        "name": "cve_year",
        "description": "The year the CVE IDs will be reserved for (i.e., 1999, ..., currentYear + 1)",
        "required": true,
        "schema": {
          "type": "integer",
          "format": "int32"
        }
      },
      "cveIdGetFilteredState": {
        "in": "query",
        "name": "state",
        "description": "Filter by state ",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "RESERVED",
            "PUBLISHED",
            "REJECTED"
          ]
        }
      },
      "cveIdGetFilteredCveIdYear": {
        "in": "query",
        "name": "cve_id_year",
        "description": "Filter by the year of the CVE IDs",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "cveIdGetFilteredTimeReservedLt": {
        "in": "query",
        "name": "time_reserved.lt",
        "description": "Most recent reserved timestamp to retrieve. Include with all requests potentially returning multiple pages of CVE IDs to avoid issues if new IDs are reserved during use. <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveIdGetFilteredTimeReservedGt": {
        "in": "query",
        "name": "time_reserved.gt",
        "description": "Earliest CVE ID reserved timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveIdGetFilteredTimeModifiedLt": {
        "in": "query",
        "name": "time_modified.lt",
        "description": "Most recent modified timestamp to retrieve. Include with all requests using a time_modified.gt filter potentially returning multiple pages of CVE IDs. This will avoid issues if IDs are reserved or modified during use.<br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveIdGetFilteredTimeModifiedGt": {
        "in": "query",
        "name": "time_modified.gt",
        "description": "Earliest CVE ID modified timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveRecordFilteredTimeModifiedLt": {
        "in": "query",
        "name": "time_modified.lt",
        "description": "Most recent CVE record modified timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveRecordFilteredTimeModifiedGt": {
        "in": "query",
        "name": "time_modified.gt",
        "description": "Earliest CVE record modified timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveRecordFilteredTimeCreatedLt": {
        "in": "query",
        "name": "time_created.lt",
        "description": "Most recent CVE record created timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "cveRecordFilteredTimeCreatedGt": {
        "in": "query",
        "name": "time_created.gt",
        "description": "Earliest CVE record created timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ",
        "required": false,
        "schema": {
          "type": "string",
          "format": "date-time"
        }
      },
      "id_quota": {
        "in": "query",
        "name": "id_quota",
        "description": "The new number of CVE IDs the organization is allowed to have in the RESERVED state at one time",
        "required": false,
        "schema": {
          "type": "integer",
          "format": "int32",
          "minimum": 0,
          "maximum": 100000
        }
      },
      "name": {
        "in": "query",
        "name": "name",
        "description": "The new name for the organization",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "nameFirst": {
        "in": "query",
        "name": "name.first",
        "description": "The new first name for the user entry",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "nameLast": {
        "in": "query",
        "name": "name.last",
        "description": "The new last name for the user entry",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "nameMiddle": {
        "in": "query",
        "name": "name.middle",
        "description": "The new middle name for the user entry",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "nameSuffix": {
        "in": "query",
        "name": "name.suffix",
        "description": "The new suffix for the user entry",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "newShortname": {
        "in": "query",
        "name": "new_short_name",
        "description": "The new shortname for the organization",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "newUsername": {
        "in": "query",
        "name": "new_username",
        "description": "The new username for the user, preferably the user's email address. Must be 3-128 characters in length; allowed characters are alphanumeric and -_@.",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "org": {
        "in": "query",
        "name": "org",
        "description": "The shortname of the new owning_cna for the CVE ID",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "orgShortname": {
        "in": "query",
        "name": "org_short_name",
        "description": "The new organization for the user",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "pageQuery": {
        "in": "query",
        "name": "page",
        "description": "The current page in the paginator",
        "required": false,
        "schema": {
          "type": "integer",
          "format": "int32",
          "minimum": 1
        }
      },
      "short_name": {
        "in": "query",
        "name": "short_name",
        "description": "The CNA that will own the reserved CVE IDs",
        "required": true,
        "schema": {
          "type": "string"
        }
      },
      "shortname": {
        "in": "query",
        "name": "shortname",
        "description": "The new shortname for the organization",
        "required": false,
        "schema": {
          "type": "string"
        }
      },
      "state": {
        "in": "query",
        "name": "state",
        "description": "The new state for the CVE ID",
        "required": false,
        "schema": {
          "type": "string",
          "enum": [
            "RESERVED",
            "REJECTED"
          ]
        }
      }
    },
    "examples": {
      "publishedRecord": {
        "value": {
          "containers": {
            "cna": {
              "affected": [
                {
                  "vendor": "string",
                  "product": "string",
                  "versions": [
                    {
                      "version": "string",
                      "status": "string"
                    }
                  ]
                }
              ],
              "descriptions": [
                {
                  "lang": "string",
                  "value": "string"
                }
              ],
              "problemTypes": [
                {
                  "descriptions": [
                    {
                      "description": "string",
                      "lang": "string",
                      "type": "string"
                    }
                  ]
                }
              ],
              "providerMetadata": {
                "orgId": "string",
                "shortName": "string",
                "dateUpdated": "2022-05-13T14:26:39.293Z"
              },
              "references": [
                {
                  "name": "string",
                  "tags": [
                    "string"
                  ],
                  "url": "string"
                }
              ]
            }
          },
          "cveMetadata": {
            "assignerOrgId": "string",
            "cveId": "string",
            "state": "string",
            "assignerShortName": "string",
            "requesterUserId": "string",
            "dateReserved": "string",
            "datePublished": "string"
          },
          "dataType": "string",
          "dataVersion": "string"
        }
      },
      "rejectedRecord": {
        "value": {
          "containers": {
            "cna": {
              "rejectedReasons": [
                {
                  "lang": "string",
                  "value": "string",
                  "supportingMedia": [
                    {
                      "type": "string",
                      "base64": false,
                      "value": "string"
                    }
                  ]
                }
              ],
              "replacedBy": [
                "string"
              ],
              "providerMetadata": {
                "orgId": "string",
                "shortName": "string",
                "dateUpdated": "2022-05-13T14:27:39.617Z"
              }
            }
          },
          "cveMetadata": {
            "assignerOrgId": "string",
            "cveId": "string",
            "state": "string",
            "assignerShortName": "string",
            "requesterUserId": "string",
            "dateReserved": "string",
            "datePublished": "string"
          },
          "dataType": "string",
          "dataVersion": "string"
        }
      },
      "rejectedCreateCVERecord": {
        "value": {
          "message": "string",
          "created": {
            "containers": {
              "cna": {
                "rejectedReasons": [
                  {
                    "lang": "string",
                    "value": "string",
                    "supportingMedia": [
                      {
                        "type": "string",
                        "base64": false,
                        "value": "string"
                      }
                    ]
                  }
                ],
                "replacedBy": [
                  "string"
                ],
                "providerMetadata": {
                  "orgId": "string",
                  "shortName": "string",
                  "dateUpdated": "2022-05-13T14:27:39.617Z"
                }
              }
            },
            "cveMetadata": {
              "assignerOrgId": "string",
              "cveId": "string",
              "state": "string",
              "assignerShortName": "string",
              "requesterUserId": "string",
              "dateReserved": "string",
              "datePublished": "string"
            },
            "dataType": "string",
            "dataVersion": "string"
          }
        }
      },
      "minCnaContainer": {
        "value": {
          "cnaContainer": {
            "descriptions": [
              {
                "lang": "string",
                "value": "string"
              }
            ],
            "affected": [
              {}
            ],
            "references": [
              {
                "url": "string"
              }
            ]
          }
        }
      },
      "fullCnaContainer": {
        "value": {
          "$schema": "http://json-schema.org/draft-07/schema#",
          "$id": "https://cve.org/cve/record/v5_00/",
          "type": "object",
          "title": "CVE JSON record format",
          "description": "cve-schema specifies the CVE JSON record format. This is the blueprint for a rich set of JSON data that can be submitted by CVE Numbering Authorities (CNAs) and Authorized Data Publishers (ADPs) to describe a CVE Record. Some examples of CVE Record data include CVE ID number, affected product(s), affected version(s), and public references. While those specific items are required when assigning a CVE, there are many other optional data in the schema that can be used to enrich CVE Records for community benefit. Learn more about the CVE program at [the official website](https://cve.mitre.org). This CVE JSON record format is defined using JSON Schema. Learn more about JSON Schema [here](https://json-schema.org/).",
          "definitions": {
            "uriType": {
              "type": "string",
              "format": "uri"
            },
            "uuidType": {
              "type": "string"
            },
            "reference": {
              "type": "object",
              "required": [
                "url"
              ],
              "properties": {
                "url": {
                  "$ref": "#/definitions/uriType"
                },
                "name": {
                  "type": "string"
                },
                "tags": {
                  "type": "array",
                  "items": {
                    "oneOf": [
                      {
                        "$ref": "#/definitions/tagExtension"
                      },
                      {
                        "$schema": "http://json-schema.org/draft-07/schema#",
                        "$id": "https://cve.mitre.org/cve/v5_00/tags/reference/",
                        "type": "string"
                      }
                    ]
                  }
                }
              }
            },
            "cveId": {
              "type": "string"
            },
            "orgId": {
              "$ref": "#/definitions/uuidType"
            },
            "userId": {
              "$ref": "#/definitions/uuidType"
            },
            "shortName": {
              "type": "string"
            },
            "datestamp": {
              "type": "string",
              "format": "date"
            },
            "timestamp": {
              "type": "string",
              "format": "date-time"
            },
            "version": {
              "type": "string"
            },
            "status": {
              "type": "string"
            },
            "product": {
              "type": "object",
              "allOf": [
                {
                  "anyOf": [
                    {
                      "required": [
                        "vendor",
                        "product"
                      ]
                    },
                    {
                      "required": [
                        "collectionURL",
                        "packageName"
                      ]
                    }
                  ]
                },
                {
                  "anyOf": [
                    {
                      "required": [
                        "versions"
                      ]
                    },
                    {
                      "required": [
                        "defaultStatus"
                      ]
                    }
                  ]
                }
              ],
              "properties": {
                "vendor": {
                  "type": "string"
                },
                "product": {
                  "type": "string"
                },
                "collectionURL": {
                  "$ref": "#/definitions/uriType"
                },
                "packageName": {
                  "type": "string"
                },
                "cpes": {
                  "type": "array",
                  "uniqueItems": true,
                  "items": {
                    "type": "string"
                  }
                },
                "modules": {
                  "type": "array",
                  "uniqueItems": true,
                  "items": {
                    "type": "string"
                  }
                },
                "programFiles": {
                  "type": "array",
                  "uniqueItems": true,
                  "items": {
                    "type": "string"
                  }
                },
                "programRoutines": {
                  "type": "array",
                  "uniqueItems": true,
                  "items": {
                    "type": "object",
                    "required": [
                      "name"
                    ],
                    "properties": {
                      "name": {
                        "type": "string"
                      }
                    }
                  }
                },
                "platforms": {
                  "type": "array",
                  "uniqueItems": true,
                  "items": {
                    "type": "string"
                  }
                },
                "repo": {
                  "$ref": "#/definitions/uriType"
                },
                "defaultStatus": {
                  "$ref": "#/definitions/status"
                },
                "versions": {
                  "type": "array",
                  "uniqueItems": true,
                  "items": {
                    "type": "object",
                    "oneOf": [
                      {
                        "required": [
                          "version",
                          "status"
                        ],
                        "maxProperties": 2
                      },
                      {
                        "required": [
                          "version",
                          "status",
                          "versionType"
                        ],
                        "oneOf": [
                          {
                            "required": [
                              "lessThan"
                            ]
                          },
                          {
                            "required": [
                              "lessThanOrEqual"
                            ]
                          }
                        ]
                      }
                    ],
                    "properties": {
                      "version": {
                        "$ref": "#/definitions/version"
                      },
                      "status": {
                        "$ref": "#/definitions/status"
                      },
                      "versionType": {
                        "type": "string"
                      },
                      "lessThan": {
                        "$ref": "#/definitions/version"
                      },
                      "lessThanOrEqual": {
                        "$ref": "#/definitions/version"
                      },
                      "changes": {
                        "type": "array",
                        "minItems": 1,
                        "uniqueItems": true,
                        "items": {
                          "type": "object",
                          "required": [
                            "at",
                            "status"
                          ],
                          "properties": {
                            "at": {
                              "$ref": "#/definitions/version"
                            },
                            "status": {
                              "$ref": "#/definitions/status"
                            }
                          }
                        }
                      }
                    }
                  }
                }
              }
            },
            "dataType": {
              "type": "string"
            },
            "dataVersion": {
              "type": "string"
            },
            "cveMetadataPublished": {
              "type": "object",
              "required": [
                "cveId",
                "assignerOrgId",
                "state"
              ],
              "properties": {
                "cveId": {
                  "$ref": "#/definitions/cveId"
                },
                "assignerOrgId": {
                  "$ref": "#/definitions/orgId"
                },
                "assignerShortName": {
                  "$ref": "#/definitions/shortName"
                },
                "requesterUserId": {
                  "$ref": "#/definitions/userId"
                },
                "dateUpdated": {
                  "$ref": "#/definitions/timestamp"
                },
                "serial": {
                  "type": "integer"
                },
                "dateReserved": {
                  "$ref": "#/definitions/timestamp"
                },
                "datePublished": {
                  "$ref": "#/definitions/timestamp"
                },
                "state": {
                  "type": "string"
                }
              },
              "additionalProperties": false
            },
            "providerMetadata": {
              "type": "object",
              "properties": {
                "orgId": {
                  "$ref": "#/definitions/orgId"
                },
                "shortName": {
                  "$ref": "#/definitions/shortName"
                },
                "dateUpdated": {
                  "$ref": "#/definitions/timestamp"
                }
              },
              "required": [
                "orgId"
              ]
            },
            "affected": {
              "type": "array",
              "minItems": 1,
              "items": {
                "$ref": "#/definitions/product"
              }
            },
            "description": {
              "type": "object",
              "properties": {
                "lang": {
                  "$ref": "#/definitions/language"
                },
                "value": {
                  "type": "string"
                },
                "supportingMedia": {
                  "type": "array",
                  "uniqueItems": true,
                  "minItems": 1,
                  "items": {
                    "type": "object",
                    "properties": {
                      "type": {
                        "type": "string"
                      },
                      "base64": {
                        "type": "boolean",
                        "default": false
                      },
                      "value": {
                        "type": "string"
                      }
                    },
                    "required": [
                      "type",
                      "value"
                    ]
                  }
                }
              },
              "required": [
                "lang",
                "value"
              ],
              "additionalProperties": false
            },
            "englishLanguageDescription": {
              "type": "object",
              "properties": {
                "lang": {
                  "$ref": "#/definitions/englishLanguage"
                }
              },
              "required": [
                "lang"
              ]
            },
            "descriptions": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "$ref": "#/definitions/description"
              },
              "contains": {
                "$ref": "#/definitions/englishLanguageDescription"
              }
            },
            "problemTypes": {
              "type": "array",
              "items": {
                "type": "object",
                "required": [
                  "descriptions"
                ],
                "properties": {
                  "descriptions": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "required": [
                        "lang",
                        "description"
                      ],
                      "properties": {
                        "lang": {
                          "$ref": "#/definitions/language"
                        },
                        "description": {
                          "type": "string"
                        },
                        "cweId": {
                          "type": "string"
                        },
                        "type": {
                          "type": "string"
                        },
                        "references": {
                          "$ref": "#/definitions/references"
                        }
                      }
                    },
                    "minItems": 1,
                    "uniqueItems": true
                  }
                }
              },
              "minItems": 1,
              "uniqueItems": true
            },
            "references": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/reference"
              },
              "minItems": 1,
              "maxItems": 512,
              "uniqueItems": true
            },
            "impacts": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "type": "object",
                "required": [
                  "descriptions"
                ],
                "properties": {
                  "capecId": {
                    "type": "string"
                  },
                  "descriptions": {
                    "$ref": "#/definitions/descriptions"
                  }
                }
              }
            },
            "metrics": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "type": "object",
                "anyOf": [
                  {
                    "required": [
                      "cvssV4_0"
                    ]
                  },
                  {
                    "required": [
                      "cvssV3_1"
                    ]
                  },
                  {
                    "required": [
                      "cvssV3_0"
                    ]
                  },
                  {
                    "required": [
                      "cvssV2_0"
                    ]
                  },
                  {
                    "required": [
                      "other"
                    ]
                  }
                ],
                "properties": {
                  "format": {
                    "type": "string"
                  },
                  "scenarios": {
                    "type": "array",
                    "minItems": 1,
                    "uniqueItems": true,
                    "items": {
                      "type": "object",
                      "properties": {
                        "lang": {
                          "$ref": "#/definitions/language"
                        },
                        "value": {
                          "type": "string"
                        }
                      },
                      "required": [
                        "lang",
                        "value"
                      ]
                    }
                  },
                  "cvssV4_0": {
                    "$schema": "http://json-schema.org/draft-07/schema#",
                    "additionalProperties": false,
                    "allOf": [
                      {
                        "properties": {
                          "baseScore": {
                            "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType"
                          },
                          "baseSeverity": {
                            "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType"
                          }
                        }
                      },
                      {
                        "properties": {
                          "threatScore": {
                            "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType"
                          },
                          "threatSeverity": {
                            "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType"
                          }
                        }
                      },
                      {
                        "properties": {
                          "environmentalScore": {
                            "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType"
                          },
                          "environmentalSeverity": {
                            "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType"
                          }
                        }
                      }
                    ],
                    "definitions": {
                      "attackComplexityType": {
                        "type": "string"
                      },
                      "attackRequirementsType": {
                        "type": "string"
                      },
                      "attackVectorType": {
                        "type": "string"
                      },
                      "automatableType": {
                        "type": "string"
                      },
                      "ciaRequirementType": {
                        "type": "string"
                      },
                      "criticalScoreType": {
                        "type": "number"
                      },
                      "criticalSeverityType": {
                        "const": "string"
                      },
                      "exploitMaturityType": {
                        "type": "string"
                      },
                      "highScoreType": {
                        "type": "number"
                      },
                      "highSeverityType": {
                        "type": "string"
                      },
                      "lowScoreType": {
                        "type": "number"
                      },
                      "lowSeverityType": {
                        "type": "string"
                      },
                      "mediumScoreType": {
                        "type": "number"
                      },
                      "mediumSeverityType": {
                        "const": "string"
                      },
                      "modifiedAttackComplexityType": {
                        "type": "string"
                      },
                      "modifiedAttackRequirementsType": {
                        "type": "string"
                      },
                      "modifiedAttackVectorType": {
                        "type": "string"
                      },
                      "modifiedPrivilegesRequiredType": {
                        "type": "string"
                      },
                      "modifiedSubCType": {
                        "type": "string"
                      },
                      "modifiedSubIaType": {
                        "type": "string"
                      },
                      "modifiedUserInteractionType": {
                        "type": "string"
                      },
                      "modifiedVulnCiaType": {
                        "type": "string"
                      },
                      "noneScoreType": {
                        "type": "number"
                      },
                      "noneSeverityType": {
                        "const": "string"
                      },
                      "privilegesRequiredType": {
                        "type": "string"
                      },
                      "providerUrgencyType": {
                        "type": "string"
                      },
                      "recoveryType": {
                        "type": "string"
                      },
                      "safetyType": {
                        "type": "string"
                      },
                      "scoreType": {
                        "type": "number"
                      },
                      "severityType": {
                        "type": "string"
                      },
                      "subCiaType": {
                        "type": "string"
                      },
                      "userInteractionType": {
                        "type": "string"
                      },
                      "valueDensityType": {
                        "type": "string"
                      },
                      "vulnCiaType": {
                        "type": "string"
                      },
                      "vulnerabilityResponseEffortType": {
                        "type": "string"
                      }
                    },
                    "properties": {
                      "Automatable": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/automatableType"
                      },
                      "Recovery": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/recoveryType"
                      },
                      "Safety": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/safetyType"
                      },
                      "attackComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackComplexityType"
                      },
                      "attackRequirements": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackRequirementsType"
                      },
                      "attackVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackVectorType"
                      },
                      "availabilityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType"
                      },
                      "baseScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/scoreType"
                      },
                      "baseSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/severityType"
                      },
                      "confidentialityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType"
                      },
                      "exploitMaturity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/exploitMaturityType"
                      },
                      "integrityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType"
                      },
                      "modifiedAttackComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackComplexityType"
                      },
                      "modifiedAttackRequirements": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackRequirementsType"
                      },
                      "modifiedAttackVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackVectorType"
                      },
                      "modifiedPrivilegesRequired": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedPrivilegesRequiredType"
                      },
                      "modifiedSubAvailabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubIaType"
                      },
                      "modifiedSubConfidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubCType"
                      },
                      "modifiedSubIntegrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubIaType"
                      },
                      "modifiedUserInteraction": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedUserInteractionType"
                      },
                      "modifiedVulnAvailabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType"
                      },
                      "modifiedVulnConfidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType"
                      },
                      "modifiedVulnIntegrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType"
                      },
                      "privilegesRequired": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/privilegesRequiredType"
                      },
                      "providerUrgency": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/providerUrgencyType"
                      },
                      "subAvailabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType"
                      },
                      "subConfidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType"
                      },
                      "subIntegrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType"
                      },
                      "userInteraction": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/userInteractionType"
                      },
                      "valueDensity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/valueDensityType"
                      },
                      "vectorString": {
                        "type": "string"
                      },
                      "version": {
                        "description": "CVSS Version",
                        "enum": [
                          "4.0"
                        ],
                        "type": "string"
                      },
                      "vulnAvailabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType"
                      },
                      "vulnConfidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType"
                      },
                      "vulnIntegrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType"
                      },
                      "vulnerabilityResponseEffort": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnerabilityResponseEffortType"
                      }
                    },
                    "required": [
                      "version",
                      "vectorString",
                      "baseScore",
                      "baseSeverity"
                    ],
                    "title": "JSON Schema for Common Vulnerability Scoring System version 4.0",
                    "type": "object"
                  },
                  "cvssV3_1": {
                    "$schema": "http://json-schema.org/draft-07/schema#",
                    "type": "object",
                    "definitions": {
                      "attackVectorType": {
                        "type": "string"
                      },
                      "modifiedAttackVectorType": {
                        "type": "string"
                      },
                      "attackComplexityType": {
                        "type": "string"
                      },
                      "modifiedAttackComplexityType": {
                        "type": "string"
                      },
                      "privilegesRequiredType": {
                        "type": "string"
                      },
                      "modifiedPrivilegesRequiredType": {
                        "type": "string"
                      },
                      "userInteractionType": {
                        "type": "string"
                      },
                      "modifiedUserInteractionType": {
                        "type": "string"
                      },
                      "scopeType": {
                        "type": "string"
                      },
                      "modifiedScopeType": {
                        "type": "string"
                      },
                      "ciaType": {
                        "type": "string"
                      },
                      "modifiedCiaType": {
                        "type": "string"
                      },
                      "exploitCodeMaturityType": {
                        "type": "string"
                      },
                      "remediationLevelType": {
                        "type": "string"
                      },
                      "confidenceType": {
                        "type": "string"
                      },
                      "ciaRequirementType": {
                        "type": "string"
                      },
                      "scoreType": {
                        "type": "number"
                      },
                      "severityType": {
                        "type": "string"
                      }
                    },
                    "properties": {
                      "version": {
                        "description": "CVSS Version",
                        "type": "string"
                      },
                      "vectorString": {
                        "type": "string"
                      },
                      "attackVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/attackVectorType"
                      },
                      "attackComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/attackComplexityType"
                      },
                      "privilegesRequired": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/privilegesRequiredType"
                      },
                      "userInteraction": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/userInteractionType"
                      },
                      "scope": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/scopeType"
                      },
                      "confidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/ciaType"
                      },
                      "integrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/ciaType"
                      },
                      "availabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/ciaType"
                      },
                      "baseScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/scoreType"
                      },
                      "baseSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/severityType"
                      },
                      "exploitCodeMaturity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/exploitCodeMaturityType"
                      },
                      "remediationLevel": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/remediationLevelType"
                      },
                      "reportConfidence": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/confidenceType"
                      },
                      "temporalScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/scoreType"
                      },
                      "temporalSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/severityType"
                      },
                      "confidentialityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/ciaRequirementType"
                      },
                      "integrityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/ciaRequirementType"
                      },
                      "availabilityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/ciaRequirementType"
                      },
                      "modifiedAttackVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedAttackVectorType"
                      },
                      "modifiedAttackComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedAttackComplexityType"
                      },
                      "modifiedPrivilegesRequired": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedPrivilegesRequiredType"
                      },
                      "modifiedUserInteraction": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedUserInteractionType"
                      },
                      "modifiedScope": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedScopeType"
                      },
                      "modifiedConfidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedCiaType"
                      },
                      "modifiedIntegrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedCiaType"
                      },
                      "modifiedAvailabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/modifiedCiaType"
                      },
                      "environmentalScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/scoreType"
                      },
                      "environmentalSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_1/definitions/severityType"
                      }
                    },
                    "required": [
                      "version",
                      "vectorString",
                      "baseScore",
                      "baseSeverity"
                    ]
                  },
                  "cvssV3_0": {
                    "$schema": "http://json-schema.org/draft-04/schema#",
                    "type": "object",
                    "definitions": {
                      "attackVectorType": {
                        "type": "string"
                      },
                      "modifiedAttackVectorType": {
                        "type": "string"
                      },
                      "attackComplexityType": {
                        "type": "string"
                      },
                      "modifiedAttackComplexityType": {
                        "type": "string"
                      },
                      "privilegesRequiredType": {
                        "type": "string"
                      },
                      "modifiedPrivilegesRequiredType": {
                        "type": "string"
                      },
                      "userInteractionType": {
                        "type": "string"
                      },
                      "modifiedUserInteractionType": {
                        "type": "string"
                      },
                      "scopeType": {
                        "type": "string"
                      },
                      "modifiedScopeType": {
                        "type": "string"
                      },
                      "ciaType": {
                        "type": "string"
                      },
                      "modifiedCiaType": {
                        "type": "string"
                      },
                      "exploitCodeMaturityType": {
                        "type": "string"
                      },
                      "remediationLevelType": {
                        "type": "string"
                      },
                      "confidenceType": {
                        "type": "string"
                      },
                      "ciaRequirementType": {
                        "type": "string"
                      },
                      "scoreType": {
                        "type": "number"
                      },
                      "severityType": {
                        "type": "string"
                      }
                    },
                    "properties": {
                      "version": {
                        "type": "string"
                      },
                      "vectorString": {
                        "type": "string"
                      },
                      "attackVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/attackVectorType"
                      },
                      "attackComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/attackComplexityType"
                      },
                      "privilegesRequired": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/privilegesRequiredType"
                      },
                      "userInteraction": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/userInteractionType"
                      },
                      "scope": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/scopeType"
                      },
                      "confidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/ciaType"
                      },
                      "integrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/ciaType"
                      },
                      "availabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/ciaType"
                      },
                      "baseScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/scoreType"
                      },
                      "baseSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/severityType"
                      },
                      "exploitCodeMaturity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/exploitCodeMaturityType"
                      },
                      "remediationLevel": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/remediationLevelType"
                      },
                      "reportConfidence": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/confidenceType"
                      },
                      "temporalScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/scoreType"
                      },
                      "temporalSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/severityType"
                      },
                      "confidentialityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/ciaRequirementType"
                      },
                      "integrityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/ciaRequirementType"
                      },
                      "availabilityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/ciaRequirementType"
                      },
                      "modifiedAttackVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedAttackVectorType"
                      },
                      "modifiedAttackComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedAttackComplexityType"
                      },
                      "modifiedPrivilegesRequired": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedPrivilegesRequiredType"
                      },
                      "modifiedUserInteraction": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedUserInteractionType"
                      },
                      "modifiedScope": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedScopeType"
                      },
                      "modifiedConfidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedCiaType"
                      },
                      "modifiedIntegrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedCiaType"
                      },
                      "modifiedAvailabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/modifiedCiaType"
                      },
                      "environmentalScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/scoreType"
                      },
                      "environmentalSeverity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV3_0/definitions/severityType"
                      }
                    },
                    "required": [
                      "version",
                      "vectorString",
                      "baseScore",
                      "baseSeverity"
                    ]
                  },
                  "cvssV2_0": {
                    "$schema": "http://json-schema.org/draft-04/schema#",
                    "type": "object",
                    "definitions": {
                      "accessVectorType": {
                        "type": "string"
                      },
                      "accessComplexityType": {
                        "type": "string"
                      },
                      "authenticationType": {
                        "type": "string"
                      },
                      "ciaType": {
                        "type": "string"
                      },
                      "exploitabilityType": {
                        "type": "string"
                      },
                      "remediationLevelType": {
                        "type": "string"
                      },
                      "reportConfidenceType": {
                        "type": "string"
                      },
                      "collateralDamagePotentialType": {
                        "type": "string"
                      },
                      "targetDistributionType": {
                        "type": "string"
                      },
                      "ciaRequirementType": {
                        "type": "string"
                      },
                      "scoreType": {
                        "type": "number"
                      }
                    },
                    "properties": {
                      "version": {
                        "type": "string"
                      },
                      "vectorString": {
                        "type": "string"
                      },
                      "accessVector": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/accessVectorType"
                      },
                      "accessComplexity": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/accessComplexityType"
                      },
                      "authentication": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/authenticationType"
                      },
                      "confidentialityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/ciaType"
                      },
                      "integrityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/ciaType"
                      },
                      "availabilityImpact": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/ciaType"
                      },
                      "baseScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/scoreType"
                      },
                      "exploitability": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/exploitabilityType"
                      },
                      "remediationLevel": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/remediationLevelType"
                      },
                      "reportConfidence": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/reportConfidenceType"
                      },
                      "temporalScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/scoreType"
                      },
                      "collateralDamagePotential": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/collateralDamagePotentialType"
                      },
                      "targetDistribution": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/targetDistributionType"
                      },
                      "confidentialityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/ciaRequirementType"
                      },
                      "integrityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/ciaRequirementType"
                      },
                      "availabilityRequirement": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/ciaRequirementType"
                      },
                      "environmentalScore": {
                        "$ref": "#/definitions/metrics/items/properties/cvssV2_0/definitions/scoreType"
                      }
                    },
                    "required": [
                      "version",
                      "vectorString",
                      "baseScore"
                    ]
                  },
                  "other": {
                    "type": "object",
                    "required": [
                      "type",
                      "content"
                    ],
                    "properties": {
                      "type": {
                        "type": "string"
                      },
                      "content": {
                        "type": "object"
                      }
                    }
                  }
                }
              }
            },
            "configurations": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "$ref": "#/definitions/description"
              }
            },
            "workarounds": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "$ref": "#/definitions/description"
              }
            },
            "solutions": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "$ref": "#/definitions/description"
              }
            },
            "exploits": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "$ref": "#/definitions/description"
              }
            },
            "timeline": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "type": "object",
                "required": [
                  "time",
                  "lang",
                  "value"
                ],
                "properties": {
                  "time": {
                    "$ref": "#/definitions/timestamp"
                  },
                  "lang": {
                    "$ref": "#/definitions/language"
                  },
                  "value": {
                    "type": "string"
                  }
                }
              }
            },
            "credits": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "type": "object",
                "properties": {
                  "lang": {
                    "$ref": "#/definitions/language"
                  },
                  "value": {
                    "type": "string"
                  },
                  "user": {
                    "$ref": "#/definitions/uuidType"
                  },
                  "type": {
                    "type": "string"
                  }
                },
                "required": [
                  "lang",
                  "value"
                ]
              }
            },
            "source": {
              "type": "object",
              "minProperties": 1
            },
            "language": {
              "type": "string"
            },
            "englishLanguage": {
              "type": "string"
            },
            "taxonomyMappings": {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "type": "object",
                "required": [
                  "taxonomyName",
                  "taxonomyRelations"
                ],
                "properties": {
                  "taxonomyName": {
                    "type": "string",
                    "minLength": 1,
                    "maxLength": 128
                  },
                  "taxonomyVersion": {
                    "type": "string",
                    "minLength": 1,
                    "maxLength": 128
                  },
                  "taxonomyRelations": {
                    "type": "array",
                    "minItems": 1,
                    "uniqueItems": true,
                    "items": {
                      "type": "object",
                      "required": [
                        "taxonomyId",
                        "relationshipName",
                        "relationshipValue"
                      ],
                      "properties": {
                        "taxonomyId": {
                          "type": "string",
                          "minLength": 1,
                          "maxLength": 2048
                        },
                        "relationshipName": {
                          "type": "string",
                          "minLength": 1,
                          "maxLength": 128
                        },
                        "relationshipValue": {
                          "type": "string",
                          "minLength": 1,
                          "maxLength": 2048
                        }
                      }
                    }
                  }
                }
              }
            },
            "tagExtension": {
              "type": "string"
            },
            "cnaTags": {
              "type": "array",
              "uniqueItems": true,
              "minItems": 1,
              "items": {
                "oneOf": [
                  {
                    "$ref": "#/definitions/tagExtension"
                  },
                  {
                    "$schema": "http://json-schema.org/draft-07/schema#",
                    "$id": "https://cve.mitre.org/cve/v5_00/tags/cna/",
                    "type": "string"
                  }
                ]
              }
            },
            "adpTags": {
              "type": "array",
              "uniqueItems": true,
              "minItems": 1,
              "items": {
                "oneOf": [
                  {
                    "$ref": "#/definitions/tagExtension"
                  },
                  {
                    "$schema": "http://json-schema.org/draft-07/schema#",
                    "$id": "https://cve.mitre.org/cve/v5_00/tags/adp/",
                    "type": "string"
                  }
                ]
              }
            }
          },
          "required": [
            "cnaContainer"
          ],
          "properties": {
            "cnaContainer": {
              "type": "object",
              "properties": {
                "providerMetadata": {
                  "$ref": "#/definitions/providerMetadata"
                },
                "dateAssigned": {
                  "$ref": "#/definitions/timestamp"
                },
                "datePublic": {
                  "$ref": "#/definitions/timestamp"
                },
                "title": {
                  "type": "string"
                },
                "descriptions": {
                  "$ref": "#/definitions/descriptions"
                },
                "affected": {
                  "$ref": "#/definitions/affected"
                },
                "problemTypes": {
                  "$ref": "#/definitions/problemTypes"
                },
                "references": {
                  "$ref": "#/definitions/references"
                },
                "impacts": {
                  "$ref": "#/definitions/impacts"
                },
                "metrics": {
                  "$ref": "#/definitions/metrics"
                },
                "configurations": {
                  "$ref": "#/definitions/configurations"
                },
                "workarounds": {
                  "$ref": "#/definitions/workarounds"
                },
                "solutions": {
                  "$ref": "#/definitions/solutions"
                },
                "exploits": {
                  "$ref": "#/definitions/exploits"
                },
                "timeline": {
                  "$ref": "#/definitions/timeline"
                },
                "credits": {
                  "$ref": "#/definitions/credits"
                },
                "source": {
                  "$ref": "#/definitions/source"
                },
                "tags": {
                  "$ref": "#/definitions/cnaTags"
                },
                "taxonomyMappings": {
                  "$ref": "#/definitions/taxonomyMappings"
                }
              },
              "required": [
                "providerMetadata",
                "descriptions",
                "affected",
                "references"
              ],
              "patternProperties": {
                "^x_[^.]*$": {}
              },
              "additionalProperties": false
            }
          }
        }
      }
    }
  }
}