1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. Adm
  5. getVulnerabilityAuditApplicationDependencyVulnerabilities
Viewing docs for Oracle Cloud Infrastructure v4.2.0
published on Friday, Mar 6, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-oci

oci.Adm.getVulnerabilityAuditApplicationDependencyVulnerabilities

oci logo
Viewing docs for Oracle Cloud Infrastructure v4.2.0
published on Friday, Mar 6, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-oci

    This data source provides the list of Vulnerability Audit Application Dependency Vulnerabilities in Oracle Cloud Infrastructure ADM service.

    Returns a list of Application Dependencies with their associated vulnerabilities.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testVulnerabilityAuditApplicationDependencyVulnerabilities = oci.Adm.getVulnerabilityAuditApplicationDependencyVulnerabilities({
    vulnerabilityAuditId: testVulnerabilityAudit.id,
    cvssV2greaterThanOrEqual: vulnerabilityAuditApplicationDependencyVulnerabilityCvssV2greaterThanOrEqual,
    cvssV3greaterThanOrEqual: vulnerabilityAuditApplicationDependencyVulnerabilityCvssV3greaterThanOrEqual,
    depth: vulnerabilityAuditApplicationDependencyVulnerabilityDepth,
    gav: vulnerabilityAuditApplicationDependencyVulnerabilityGav,
    purl: vulnerabilityAuditApplicationDependencyVulnerabilityPurl,
    rootNodeId: testRootNode.id,
    severityGreaterThanOrEqual: vulnerabilityAuditApplicationDependencyVulnerabilitySeverityGreaterThanOrEqual,
    vulnerabilityId: testVulnerability.id,
});

    import pulumi
import pulumi_oci as oci

test_vulnerability_audit_application_dependency_vulnerabilities = oci.Adm.get_vulnerability_audit_application_dependency_vulnerabilities(vulnerability_audit_id=test_vulnerability_audit["id"],
    cvss_v2greater_than_or_equal=vulnerability_audit_application_dependency_vulnerability_cvss_v2greater_than_or_equal,
    cvss_v3greater_than_or_equal=vulnerability_audit_application_dependency_vulnerability_cvss_v3greater_than_or_equal,
    depth=vulnerability_audit_application_dependency_vulnerability_depth,
    gav=vulnerability_audit_application_dependency_vulnerability_gav,
    purl=vulnerability_audit_application_dependency_vulnerability_purl,
    root_node_id=test_root_node["id"],
    severity_greater_than_or_equal=vulnerability_audit_application_dependency_vulnerability_severity_greater_than_or_equal,
    vulnerability_id=test_vulnerability["id"])

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v4/go/oci/adm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := adm.GetVulnerabilityAuditApplicationDependencyVulnerabilities(ctx, &adm.GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs{
			VulnerabilityAuditId:       testVulnerabilityAudit.Id,
			CvssV2greaterThanOrEqual:   pulumi.Float64Ref(vulnerabilityAuditApplicationDependencyVulnerabilityCvssV2greaterThanOrEqual),
			CvssV3greaterThanOrEqual:   pulumi.Float64Ref(vulnerabilityAuditApplicationDependencyVulnerabilityCvssV3greaterThanOrEqual),
			Depth:                      pulumi.IntRef(vulnerabilityAuditApplicationDependencyVulnerabilityDepth),
			Gav:                        pulumi.StringRef(vulnerabilityAuditApplicationDependencyVulnerabilityGav),
			Purl:                       pulumi.StringRef(vulnerabilityAuditApplicationDependencyVulnerabilityPurl),
			RootNodeId:                 pulumi.StringRef(testRootNode.Id),
			SeverityGreaterThanOrEqual: pulumi.StringRef(vulnerabilityAuditApplicationDependencyVulnerabilitySeverityGreaterThanOrEqual),
			VulnerabilityId:            pulumi.StringRef(testVulnerability.Id),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testVulnerabilityAuditApplicationDependencyVulnerabilities = Oci.Adm.GetVulnerabilityAuditApplicationDependencyVulnerabilities.Invoke(new()
    {
        VulnerabilityAuditId = testVulnerabilityAudit.Id,
        CvssV2greaterThanOrEqual = vulnerabilityAuditApplicationDependencyVulnerabilityCvssV2greaterThanOrEqual,
        CvssV3greaterThanOrEqual = vulnerabilityAuditApplicationDependencyVulnerabilityCvssV3greaterThanOrEqual,
        Depth = vulnerabilityAuditApplicationDependencyVulnerabilityDepth,
        Gav = vulnerabilityAuditApplicationDependencyVulnerabilityGav,
        Purl = vulnerabilityAuditApplicationDependencyVulnerabilityPurl,
        RootNodeId = testRootNode.Id,
        SeverityGreaterThanOrEqual = vulnerabilityAuditApplicationDependencyVulnerabilitySeverityGreaterThanOrEqual,
        VulnerabilityId = testVulnerability.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Adm.AdmFunctions;
import com.pulumi.oci.Adm.inputs.GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testVulnerabilityAuditApplicationDependencyVulnerabilities = AdmFunctions.getVulnerabilityAuditApplicationDependencyVulnerabilities(GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs.builder()
            .vulnerabilityAuditId(testVulnerabilityAudit.id())
            .cvssV2greaterThanOrEqual(vulnerabilityAuditApplicationDependencyVulnerabilityCvssV2greaterThanOrEqual)
            .cvssV3greaterThanOrEqual(vulnerabilityAuditApplicationDependencyVulnerabilityCvssV3greaterThanOrEqual)
            .depth(vulnerabilityAuditApplicationDependencyVulnerabilityDepth)
            .gav(vulnerabilityAuditApplicationDependencyVulnerabilityGav)
            .purl(vulnerabilityAuditApplicationDependencyVulnerabilityPurl)
            .rootNodeId(testRootNode.id())
            .severityGreaterThanOrEqual(vulnerabilityAuditApplicationDependencyVulnerabilitySeverityGreaterThanOrEqual)
            .vulnerabilityId(testVulnerability.id())
            .build());

    }
}

    variables:
  testVulnerabilityAuditApplicationDependencyVulnerabilities:
    fn::invoke:
      function: oci:Adm:getVulnerabilityAuditApplicationDependencyVulnerabilities
      arguments:
        vulnerabilityAuditId: ${testVulnerabilityAudit.id}
        cvssV2greaterThanOrEqual: ${vulnerabilityAuditApplicationDependencyVulnerabilityCvssV2greaterThanOrEqual}
        cvssV3greaterThanOrEqual: ${vulnerabilityAuditApplicationDependencyVulnerabilityCvssV3greaterThanOrEqual}
        depth: ${vulnerabilityAuditApplicationDependencyVulnerabilityDepth}
        gav: ${vulnerabilityAuditApplicationDependencyVulnerabilityGav}
        purl: ${vulnerabilityAuditApplicationDependencyVulnerabilityPurl}
        rootNodeId: ${testRootNode.id}
        severityGreaterThanOrEqual: ${vulnerabilityAuditApplicationDependencyVulnerabilitySeverityGreaterThanOrEqual}
        vulnerabilityId: ${testVulnerability.id}

    Using getVulnerabilityAuditApplicationDependencyVulnerabilities

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getVulnerabilityAuditApplicationDependencyVulnerabilities(args: GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs, opts?: InvokeOptions): Promise<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult>
function getVulnerabilityAuditApplicationDependencyVulnerabilitiesOutput(args: GetVulnerabilityAuditApplicationDependencyVulnerabilitiesOutputArgs, opts?: InvokeOptions): Output<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult>
    def get_vulnerability_audit_application_dependency_vulnerabilities(cvss_v2greater_than_or_equal: Optional[float] = None,
                                                                   cvss_v3greater_than_or_equal: Optional[float] = None,
                                                                   depth: Optional[int] = None,
                                                                   filters: Optional[Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter]] = None,
                                                                   gav: Optional[str] = None,
                                                                   purl: Optional[str] = None,
                                                                   root_node_id: Optional[str] = None,
                                                                   severity_greater_than_or_equal: Optional[str] = None,
                                                                   sort_by: Optional[str] = None,
                                                                   vulnerability_audit_id: Optional[str] = None,
                                                                   vulnerability_id: Optional[str] = None,
                                                                   opts: Optional[InvokeOptions] = None) -> GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult
def get_vulnerability_audit_application_dependency_vulnerabilities_output(cvss_v2greater_than_or_equal: Optional[pulumi.Input[float]] = None,
                                                                   cvss_v3greater_than_or_equal: Optional[pulumi.Input[float]] = None,
                                                                   depth: Optional[pulumi.Input[int]] = None,
                                                                   filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilterArgs]]]] = None,
                                                                   gav: Optional[pulumi.Input[str]] = None,
                                                                   purl: Optional[pulumi.Input[str]] = None,
                                                                   root_node_id: Optional[pulumi.Input[str]] = None,
                                                                   severity_greater_than_or_equal: Optional[pulumi.Input[str]] = None,
                                                                   sort_by: Optional[pulumi.Input[str]] = None,
                                                                   vulnerability_audit_id: Optional[pulumi.Input[str]] = None,
                                                                   vulnerability_id: Optional[pulumi.Input[str]] = None,
                                                                   opts: Optional[InvokeOptions] = None) -> Output[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult]
    func GetVulnerabilityAuditApplicationDependencyVulnerabilities(ctx *Context, args *GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs, opts ...InvokeOption) (*GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult, error)
func GetVulnerabilityAuditApplicationDependencyVulnerabilitiesOutput(ctx *Context, args *GetVulnerabilityAuditApplicationDependencyVulnerabilitiesOutputArgs, opts ...InvokeOption) GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResultOutput

    > Note: This function is named GetVulnerabilityAuditApplicationDependencyVulnerabilities in the Go SDK.

    public static class GetVulnerabilityAuditApplicationDependencyVulnerabilities 
{
    public static Task<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult> InvokeAsync(GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs args, InvokeOptions? opts = null)
    public static Output<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult> Invoke(GetVulnerabilityAuditApplicationDependencyVulnerabilitiesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult> getVulnerabilityAuditApplicationDependencyVulnerabilities(GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs args, InvokeOptions options)
public static Output<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesResult> getVulnerabilityAuditApplicationDependencyVulnerabilities(GetVulnerabilityAuditApplicationDependencyVulnerabilitiesArgs args, InvokeOptions options)

    fn::invoke:
  function: oci:Adm/getVulnerabilityAuditApplicationDependencyVulnerabilities:getVulnerabilityAuditApplicationDependencyVulnerabilities
  arguments:
    # arguments dictionary

    The following arguments are supported:

    VulnerabilityAuditId string
    Unique Vulnerability Audit identifier path parameter.
    CvssV2greaterThanOrEqual double
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 2 (CVSS V2) greater than or equal to the specified value.
    CvssV3greaterThanOrEqual double
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 3 (CVSS V3) greater than or equal to the specified value.
    Depth int
    A filter to limit depth of the application dependencies tree traversal. Additionally query parameters such as "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" can't be used in conjunction with this latter.
    Filters List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter>
    Gav string
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    Purl string
    A filter to return only resources that match the entire purl given.
    RootNodeId string
    A filter to override the top level root identifier with the new given value. The application dependency tree will only be traversed from the given node. Query parameters "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" cannot be used in conjunction with this parameter.
    SeverityGreaterThanOrEqual string
    A filter that returns only Vulnerabilities that have a severity greater than or equal to the specified value.
    SortBy string
    VulnerabilityId string
    A filter to return only Vulnerability Audits that match the specified id.
    VulnerabilityAuditId string
    Unique Vulnerability Audit identifier path parameter.
    CvssV2greaterThanOrEqual float64
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 2 (CVSS V2) greater than or equal to the specified value.
    CvssV3greaterThanOrEqual float64
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 3 (CVSS V3) greater than or equal to the specified value.
    Depth int
    A filter to limit depth of the application dependencies tree traversal. Additionally query parameters such as "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" can't be used in conjunction with this latter.
    Filters []GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter
    Gav string
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    Purl string
    A filter to return only resources that match the entire purl given.
    RootNodeId string
    A filter to override the top level root identifier with the new given value. The application dependency tree will only be traversed from the given node. Query parameters "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" cannot be used in conjunction with this parameter.
    SeverityGreaterThanOrEqual string
    A filter that returns only Vulnerabilities that have a severity greater than or equal to the specified value.
    SortBy string
    VulnerabilityId string
    A filter to return only Vulnerability Audits that match the specified id.
    vulnerabilityAuditId String
    Unique Vulnerability Audit identifier path parameter.
    cvssV2greaterThanOrEqual Double
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 2 (CVSS V2) greater than or equal to the specified value.
    cvssV3greaterThanOrEqual Double
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 3 (CVSS V3) greater than or equal to the specified value.
    depth Integer
    A filter to limit depth of the application dependencies tree traversal. Additionally query parameters such as "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" can't be used in conjunction with this latter.
    filters List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter>
    gav String
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    purl String
    A filter to return only resources that match the entire purl given.
    rootNodeId String
    A filter to override the top level root identifier with the new given value. The application dependency tree will only be traversed from the given node. Query parameters "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" cannot be used in conjunction with this parameter.
    severityGreaterThanOrEqual String
    A filter that returns only Vulnerabilities that have a severity greater than or equal to the specified value.
    sortBy String
    vulnerabilityId String
    A filter to return only Vulnerability Audits that match the specified id.
    vulnerabilityAuditId string
    Unique Vulnerability Audit identifier path parameter.
    cvssV2greaterThanOrEqual number
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 2 (CVSS V2) greater than or equal to the specified value.
    cvssV3greaterThanOrEqual number
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 3 (CVSS V3) greater than or equal to the specified value.
    depth number
    A filter to limit depth of the application dependencies tree traversal. Additionally query parameters such as "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" can't be used in conjunction with this latter.
    filters GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter[]
    gav string
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    purl string
    A filter to return only resources that match the entire purl given.
    rootNodeId string
    A filter to override the top level root identifier with the new given value. The application dependency tree will only be traversed from the given node. Query parameters "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" cannot be used in conjunction with this parameter.
    severityGreaterThanOrEqual string
    A filter that returns only Vulnerabilities that have a severity greater than or equal to the specified value.
    sortBy string
    vulnerabilityId string
    A filter to return only Vulnerability Audits that match the specified id.
    vulnerability_audit_id str
    Unique Vulnerability Audit identifier path parameter.
    cvss_v2greater_than_or_equal float
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 2 (CVSS V2) greater than or equal to the specified value.
    cvss_v3greater_than_or_equal float
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 3 (CVSS V3) greater than or equal to the specified value.
    depth int
    A filter to limit depth of the application dependencies tree traversal. Additionally query parameters such as "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" can't be used in conjunction with this latter.
    filters Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter]
    gav str
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    purl str
    A filter to return only resources that match the entire purl given.
    root_node_id str
    A filter to override the top level root identifier with the new given value. The application dependency tree will only be traversed from the given node. Query parameters "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" cannot be used in conjunction with this parameter.
    severity_greater_than_or_equal str
    A filter that returns only Vulnerabilities that have a severity greater than or equal to the specified value.
    sort_by str
    vulnerability_id str
    A filter to return only Vulnerability Audits that match the specified id.
    vulnerabilityAuditId String
    Unique Vulnerability Audit identifier path parameter.
    cvssV2greaterThanOrEqual Number
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 2 (CVSS V2) greater than or equal to the specified value.
    cvssV3greaterThanOrEqual Number
    A filter that returns only Vulnerabilities that have a Common Vulnerability Scoring System Version 3 (CVSS V3) greater than or equal to the specified value.
    depth Number
    A filter to limit depth of the application dependencies tree traversal. Additionally query parameters such as "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" can't be used in conjunction with this latter.
    filters List<Property Map>
    gav String
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    purl String
    A filter to return only resources that match the entire purl given.
    rootNodeId String
    A filter to override the top level root identifier with the new given value. The application dependency tree will only be traversed from the given node. Query parameters "cvssV2GreaterThanOrEqual", "cvssV3GreaterThanOrEqual", "gav" and "vulnerabilityId" cannot be used in conjunction with this parameter.
    severityGreaterThanOrEqual String
    A filter that returns only Vulnerabilities that have a severity greater than or equal to the specified value.
    sortBy String
    vulnerabilityId String
    A filter to return only Vulnerability Audits that match the specified id.

    getVulnerabilityAuditApplicationDependencyVulnerabilities Result

    The following output properties are available:

    ApplicationDependencyVulnerabilityCollections List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollection>
    The list of VulnerabilityAuditApplicationDependencyVulnerability.
    Id string
    The provider-assigned unique ID for this managed resource.
    VulnerabilityAuditId string
    CvssV2greaterThanOrEqual double
    CvssV3greaterThanOrEqual double
    Depth int
    Filters List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter>
    Gav string
    Group Artifact Version (GAV) identifier (Group:Artifact:Version). Example: org.graalvm.nativeimage:svm:21.1.0. "N/A" for non-maven artifacts.
    Purl string
    Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
    RootNodeId string
    SeverityGreaterThanOrEqual string
    SortBy string
    VulnerabilityId string
    ApplicationDependencyVulnerabilityCollections []GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollection
    The list of VulnerabilityAuditApplicationDependencyVulnerability.
    Id string
    The provider-assigned unique ID for this managed resource.
    VulnerabilityAuditId string
    CvssV2greaterThanOrEqual float64
    CvssV3greaterThanOrEqual float64
    Depth int
    Filters []GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter
    Gav string
    Group Artifact Version (GAV) identifier (Group:Artifact:Version). Example: org.graalvm.nativeimage:svm:21.1.0. "N/A" for non-maven artifacts.
    Purl string
    Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
    RootNodeId string
    SeverityGreaterThanOrEqual string
    SortBy string
    VulnerabilityId string
    applicationDependencyVulnerabilityCollections List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollection>
    The list of VulnerabilityAuditApplicationDependencyVulnerability.
    id String
    The provider-assigned unique ID for this managed resource.
    vulnerabilityAuditId String
    cvssV2greaterThanOrEqual Double
    cvssV3greaterThanOrEqual Double
    depth Integer
    filters List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter>
    gav String
    Group Artifact Version (GAV) identifier (Group:Artifact:Version). Example: org.graalvm.nativeimage:svm:21.1.0. "N/A" for non-maven artifacts.
    purl String
    Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
    rootNodeId String
    severityGreaterThanOrEqual String
    sortBy String
    vulnerabilityId String
    applicationDependencyVulnerabilityCollections GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollection[]
    The list of VulnerabilityAuditApplicationDependencyVulnerability.
    id string
    The provider-assigned unique ID for this managed resource.
    vulnerabilityAuditId string
    cvssV2greaterThanOrEqual number
    cvssV3greaterThanOrEqual number
    depth number
    filters GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter[]
    gav string
    Group Artifact Version (GAV) identifier (Group:Artifact:Version). Example: org.graalvm.nativeimage:svm:21.1.0. "N/A" for non-maven artifacts.
    purl string
    Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
    rootNodeId string
    severityGreaterThanOrEqual string
    sortBy string
    vulnerabilityId string
    application_dependency_vulnerability_collections Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollection]
    The list of VulnerabilityAuditApplicationDependencyVulnerability.
    id str
    The provider-assigned unique ID for this managed resource.
    vulnerability_audit_id str
    cvss_v2greater_than_or_equal float
    cvss_v3greater_than_or_equal float
    depth int
    filters Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter]
    gav str
    Group Artifact Version (GAV) identifier (Group:Artifact:Version). Example: org.graalvm.nativeimage:svm:21.1.0. "N/A" for non-maven artifacts.
    purl str
    Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
    root_node_id str
    severity_greater_than_or_equal str
    sort_by str
    vulnerability_id str
    applicationDependencyVulnerabilityCollections List<Property Map>
    The list of VulnerabilityAuditApplicationDependencyVulnerability.
    id String
    The provider-assigned unique ID for this managed resource.
    vulnerabilityAuditId String
    cvssV2greaterThanOrEqual Number
    cvssV3greaterThanOrEqual Number
    depth Number
    filters List<Property Map>
    gav String
    Group Artifact Version (GAV) identifier (Group:Artifact:Version). Example: org.graalvm.nativeimage:svm:21.1.0. "N/A" for non-maven artifacts.
    purl String
    Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
    rootNodeId String
    severityGreaterThanOrEqual String
    sortBy String
    vulnerabilityId String

    Supporting Types

    GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollection

    items List<Property Map>
    List of vulnerability audit summaries.

    GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItem

    ApplicationDependencyNodeIds List<string>
    List of application dependencies on which this application dependency depends, each identified by its nodeId.
    Gav string
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    IsFoundInKnowledgeBase bool
    Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
    NodeId string
    Unique identifier of an application dependency, for example nodeId1.
    Purl string
    A filter to return only resources that match the entire purl given.
    Vulnerabilities List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerability>
    List of vulnerabilities for the application dependency.
    Warnings List<string>
    Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:

    • MISSING_VERSION: Missing version
    • INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
    • UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
    • INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
    • MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
    • UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
    • MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
    • UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
    • EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
    • INVALID_PURL: The provided PURL could not be parsed
    ApplicationDependencyNodeIds []string
    List of application dependencies on which this application dependency depends, each identified by its nodeId.
    Gav string
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    IsFoundInKnowledgeBase bool
    Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
    NodeId string
    Unique identifier of an application dependency, for example nodeId1.
    Purl string
    A filter to return only resources that match the entire purl given.
    Vulnerabilities []GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerability
    List of vulnerabilities for the application dependency.
    Warnings []string
    Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:

    • MISSING_VERSION: Missing version
    • INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
    • UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
    • INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
    • MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
    • UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
    • MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
    • UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
    • EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
    • INVALID_PURL: The provided PURL could not be parsed
    applicationDependencyNodeIds List<String>
    List of application dependencies on which this application dependency depends, each identified by its nodeId.
    gav String
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    isFoundInKnowledgeBase Boolean
    Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
    nodeId String
    Unique identifier of an application dependency, for example nodeId1.
    purl String
    A filter to return only resources that match the entire purl given.
    vulnerabilities List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerability>
    List of vulnerabilities for the application dependency.
    warnings List<String>
    Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:

    • MISSING_VERSION: Missing version
    • INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
    • UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
    • INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
    • MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
    • UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
    • MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
    • UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
    • EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
    • INVALID_PURL: The provided PURL could not be parsed
    applicationDependencyNodeIds string[]
    List of application dependencies on which this application dependency depends, each identified by its nodeId.
    gav string
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    isFoundInKnowledgeBase boolean
    Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
    nodeId string
    Unique identifier of an application dependency, for example nodeId1.
    purl string
    A filter to return only resources that match the entire purl given.
    vulnerabilities GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerability[]
    List of vulnerabilities for the application dependency.
    warnings string[]
    Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:

    • MISSING_VERSION: Missing version
    • INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
    • UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
    • INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
    • MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
    • UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
    • MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
    • UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
    • EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
    • INVALID_PURL: The provided PURL could not be parsed
    application_dependency_node_ids Sequence[str]
    List of application dependencies on which this application dependency depends, each identified by its nodeId.
    gav str
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    is_found_in_knowledge_base bool
    Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
    node_id str
    Unique identifier of an application dependency, for example nodeId1.
    purl str
    A filter to return only resources that match the entire purl given.
    vulnerabilities Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerability]
    List of vulnerabilities for the application dependency.
    warnings Sequence[str]
    Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:

    • MISSING_VERSION: Missing version
    • INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
    • UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
    • INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
    • MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
    • UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
    • MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
    • UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
    • EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
    • INVALID_PURL: The provided PURL could not be parsed
    applicationDependencyNodeIds List<String>
    List of application dependencies on which this application dependency depends, each identified by its nodeId.
    gav String
    A filter to return only resources that match the entire GAV (Group Artifact Version) identifier given.
    isFoundInKnowledgeBase Boolean
    Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
    nodeId String
    Unique identifier of an application dependency, for example nodeId1.
    purl String
    A filter to return only resources that match the entire purl given.
    vulnerabilities List<Property Map>
    List of vulnerabilities for the application dependency.
    warnings List<String>
    Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:

    • MISSING_VERSION: Missing version
    • INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
    • UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
    • INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
    • MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
    • UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
    • MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
    • UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
    • EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
    • INVALID_PURL: The provided PURL could not be parsed

    GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerability

    CvssV2score double
    Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    CvssV3score double
    Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    Id string
    Unique vulnerability identifier, e.g. CVE-1999-0067.
    IsFalsePositive bool
    Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is null.
    IsIgnored bool
    Indicates if the vulnerability was ignored according to the audit configuration.
    MatchingVulnerableArtifactVersionRanges List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMatchingVulnerableArtifactVersionRange>
    List of artifact version ranges affected by a particular vulnerability.
    Metrics List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMetric>
    List of reported metrics by the source.
    Severity string
    ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.
    Source string
    Source that published the vulnerability
    CvssV2score float64
    Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    CvssV3score float64
    Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    Id string
    Unique vulnerability identifier, e.g. CVE-1999-0067.
    IsFalsePositive bool
    Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is null.
    IsIgnored bool
    Indicates if the vulnerability was ignored according to the audit configuration.
    MatchingVulnerableArtifactVersionRanges []GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMatchingVulnerableArtifactVersionRange
    List of artifact version ranges affected by a particular vulnerability.
    Metrics []GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMetric
    List of reported metrics by the source.
    Severity string
    ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.
    Source string
    Source that published the vulnerability
    cvssV2score Double
    Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    cvssV3score Double
    Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    id String
    Unique vulnerability identifier, e.g. CVE-1999-0067.
    isFalsePositive Boolean
    Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is null.
    isIgnored Boolean
    Indicates if the vulnerability was ignored according to the audit configuration.
    matchingVulnerableArtifactVersionRanges List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMatchingVulnerableArtifactVersionRange>
    List of artifact version ranges affected by a particular vulnerability.
    metrics List<GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMetric>
    List of reported metrics by the source.
    severity String
    ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.
    source String
    Source that published the vulnerability
    cvssV2score number
    Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    cvssV3score number
    Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    id string
    Unique vulnerability identifier, e.g. CVE-1999-0067.
    isFalsePositive boolean
    Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is null.
    isIgnored boolean
    Indicates if the vulnerability was ignored according to the audit configuration.
    matchingVulnerableArtifactVersionRanges GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMatchingVulnerableArtifactVersionRange[]
    List of artifact version ranges affected by a particular vulnerability.
    metrics GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMetric[]
    List of reported metrics by the source.
    severity string
    ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.
    source string
    Source that published the vulnerability
    cvss_v2score float
    Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    cvss_v3score float
    Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    id str
    Unique vulnerability identifier, e.g. CVE-1999-0067.
    is_false_positive bool
    Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is null.
    is_ignored bool
    Indicates if the vulnerability was ignored according to the audit configuration.
    matching_vulnerable_artifact_version_ranges Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMatchingVulnerableArtifactVersionRange]
    List of artifact version ranges affected by a particular vulnerability.
    metrics Sequence[GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMetric]
    List of reported metrics by the source.
    severity str
    ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.
    source str
    Source that published the vulnerability
    cvssV2score Number
    Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    cvssV3score Number
    Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source. This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
    id String
    Unique vulnerability identifier, e.g. CVE-1999-0067.
    isFalsePositive Boolean
    Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is null.
    isIgnored Boolean
    Indicates if the vulnerability was ignored according to the audit configuration.
    matchingVulnerableArtifactVersionRanges List<Property Map>
    List of artifact version ranges affected by a particular vulnerability.
    metrics List<Property Map>
    List of reported metrics by the source.
    severity String
    ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.
    source String
    Source that published the vulnerability

    GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMatchingVulnerableArtifactVersionRange

    VersionEndExcluding string
    The version immediately after the last affected version. Versions up to, but not including this version, are vulnerable.
    VersionEndIncluding string
    Marks the latest version that is affected by the vulnerability. This version and all preceding versions, going back to versionStartExcluding or versionStartIncluding, are considered vulnerable.
    VersionStartExcluding string
    The version immediately before the start of affected versions. The specified version is not affected, but versions immediately after are, up to versionStartIncluding or beyond, if not otherwise defined.
    VersionStartIncluding string
    The first version affected by the vulnerability. This version and those following it are considered vulnerable until versionEndExcluding or versionEndIncluding is reached.
    VersionEndExcluding string
    The version immediately after the last affected version. Versions up to, but not including this version, are vulnerable.
    VersionEndIncluding string
    Marks the latest version that is affected by the vulnerability. This version and all preceding versions, going back to versionStartExcluding or versionStartIncluding, are considered vulnerable.
    VersionStartExcluding string
    The version immediately before the start of affected versions. The specified version is not affected, but versions immediately after are, up to versionStartIncluding or beyond, if not otherwise defined.
    VersionStartIncluding string
    The first version affected by the vulnerability. This version and those following it are considered vulnerable until versionEndExcluding or versionEndIncluding is reached.
    versionEndExcluding String
    The version immediately after the last affected version. Versions up to, but not including this version, are vulnerable.
    versionEndIncluding String
    Marks the latest version that is affected by the vulnerability. This version and all preceding versions, going back to versionStartExcluding or versionStartIncluding, are considered vulnerable.
    versionStartExcluding String
    The version immediately before the start of affected versions. The specified version is not affected, but versions immediately after are, up to versionStartIncluding or beyond, if not otherwise defined.
    versionStartIncluding String
    The first version affected by the vulnerability. This version and those following it are considered vulnerable until versionEndExcluding or versionEndIncluding is reached.
    versionEndExcluding string
    The version immediately after the last affected version. Versions up to, but not including this version, are vulnerable.
    versionEndIncluding string
    Marks the latest version that is affected by the vulnerability. This version and all preceding versions, going back to versionStartExcluding or versionStartIncluding, are considered vulnerable.
    versionStartExcluding string
    The version immediately before the start of affected versions. The specified version is not affected, but versions immediately after are, up to versionStartIncluding or beyond, if not otherwise defined.
    versionStartIncluding string
    The first version affected by the vulnerability. This version and those following it are considered vulnerable until versionEndExcluding or versionEndIncluding is reached.
    version_end_excluding str
    The version immediately after the last affected version. Versions up to, but not including this version, are vulnerable.
    version_end_including str
    Marks the latest version that is affected by the vulnerability. This version and all preceding versions, going back to versionStartExcluding or versionStartIncluding, are considered vulnerable.
    version_start_excluding str
    The version immediately before the start of affected versions. The specified version is not affected, but versions immediately after are, up to versionStartIncluding or beyond, if not otherwise defined.
    version_start_including str
    The first version affected by the vulnerability. This version and those following it are considered vulnerable until versionEndExcluding or versionEndIncluding is reached.
    versionEndExcluding String
    The version immediately after the last affected version. Versions up to, but not including this version, are vulnerable.
    versionEndIncluding String
    Marks the latest version that is affected by the vulnerability. This version and all preceding versions, going back to versionStartExcluding or versionStartIncluding, are considered vulnerable.
    versionStartExcluding String
    The version immediately before the start of affected versions. The specified version is not affected, but versions immediately after are, up to versionStartIncluding or beyond, if not otherwise defined.
    versionStartIncluding String
    The first version affected by the vulnerability. This version and those following it are considered vulnerable until versionEndExcluding or versionEndIncluding is reached.

    GetVulnerabilityAuditApplicationDependencyVulnerabilitiesApplicationDependencyVulnerabilityCollectionItemVulnerabilityMetric

    Score double
    Numerical representation of metric (if exists). For example for CVSS vectors, the score is the base score according to the CVSS scoring system.
    Source string
    Source that published the vulnerability
    Type string
    Type of the vulnerability metric e.g., CVSS2, CVSS3, Severity.
    Value string
    Value of the vulnerability metric e.g., a string representation of a severity value or a cvss vector.
    Score float64
    Numerical representation of metric (if exists). For example for CVSS vectors, the score is the base score according to the CVSS scoring system.
    Source string
    Source that published the vulnerability
    Type string
    Type of the vulnerability metric e.g., CVSS2, CVSS3, Severity.
    Value string
    Value of the vulnerability metric e.g., a string representation of a severity value or a cvss vector.
    score Double
    Numerical representation of metric (if exists). For example for CVSS vectors, the score is the base score according to the CVSS scoring system.
    source String
    Source that published the vulnerability
    type String
    Type of the vulnerability metric e.g., CVSS2, CVSS3, Severity.
    value String
    Value of the vulnerability metric e.g., a string representation of a severity value or a cvss vector.
    score number
    Numerical representation of metric (if exists). For example for CVSS vectors, the score is the base score according to the CVSS scoring system.
    source string
    Source that published the vulnerability
    type string
    Type of the vulnerability metric e.g., CVSS2, CVSS3, Severity.
    value string
    Value of the vulnerability metric e.g., a string representation of a severity value or a cvss vector.
    score float
    Numerical representation of metric (if exists). For example for CVSS vectors, the score is the base score according to the CVSS scoring system.
    source str
    Source that published the vulnerability
    type str
    Type of the vulnerability metric e.g., CVSS2, CVSS3, Severity.
    value str
    Value of the vulnerability metric e.g., a string representation of a severity value or a cvss vector.
    score Number
    Numerical representation of metric (if exists). For example for CVSS vectors, the score is the base score according to the CVSS scoring system.
    source String
    Source that published the vulnerability
    type String
    Type of the vulnerability metric e.g., CVSS2, CVSS3, Severity.
    value String
    Value of the vulnerability metric e.g., a string representation of a severity value or a cvss vector.

    GetVulnerabilityAuditApplicationDependencyVulnerabilitiesFilter

    Name string
    Values List<string>
    Regex bool
    Name string
    Values []string
    Regex bool
    name String
    values List<String>
    regex Boolean
    name string
    values string[]
    regex boolean
    name str
    values Sequence[str]
    regex bool
    name String
    values List<String>
    regex Boolean

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Viewing docs for Oracle Cloud Infrastructure v4.2.0
    published on Friday, Mar 6, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-oci
      Try Pulumi Cloud free. Your team will thank you.