Optionaldatabase_Database-specific metadata
Optionalecosystem_Ecosystem-specific metadata
OptionalpackageThe affected package — may be absent when purl is specified at range level
OptionalrangesVersion ranges describing the scope of the vulnerability
OptionalversionsExplicit list of affected versions
Describes which versions of a package are affected by a vulnerability.