feat: add CWEs field to VulnerabilityBlob to support weaknesses data from NVD Signed-off-by: Hasnat Bashir <hasnatbashir900@gmail.com>

hasnatbashir · hasnatbashir · commit 3573227aff83 · 2025-08-29T22:08:37.000+01:00
diff --git a/grype/db/v6/blobs.go b/grype/db/v6/blobs.go
@@ -26,6 +26,9 @@ type VulnerabilityBlob struct {
 
 	// Severities is a list of severity indications (quantitative or qualitative) for the vulnerability
 	Severities []Severity `json:"severities,omitempty"`
+
+	// CWEs is a list of Common Weakness Enumeration (CWE) identifiers that classify the type of vulnerability
+	CWEs []string `json:"cwes,omitempty"`
 }
 
 func (v VulnerabilityBlob) String() string {

Original file line number	Diff line number	Diff line change
`@@ -26,6 +26,9 @@ type VulnerabilityBlob struct {`
`26`	`26`
`27`	`27`	`// Severities is a list of severity indications (quantitative or qualitative) for the vulnerability`
`28`	`28`	Severities []Severity `json:"severities,omitempty"`
	`29`	`+`
	`30`	`+ // CWEs is a list of Common Weakness Enumeration (CWE) identifiers that classify the type of vulnerability`
	`31`	+ CWEs []string `json:"cwes,omitempty"`
`29`	`32`	`}`
`30`	`33`
`31`	`34`	`func (v VulnerabilityBlob) String() string {`