Skip to content

target_ids should be unique #905

Closed

Description

@tschmidtb51

Describe the bug
The target_ids should be unique items.

To Reproduce
Steps to reproduce the behavior:

  1. Create an instance of DPVS (should be valid according to https://raw.githubusercontent.com/CERTCC/SSVC/refs/heads/main/data/schema/v2/Decision_Point_Value_Selection-2-0-0.schema.json)
  2. Add a single string multiple times to `target_ids

Expected behavior
Should fail - each one should be unique

Screenshots

Example:

{
              "schemaVersion": "2.0.0",
              "selections": [
                {
                  "key": "AC",
                  "name": "Attack Complexity",
                  "namespace": "cvss",
                  "values": [
                    {
                      "key": "L",
                      "name": "Low"
                    }
                  ],
                  "version": "3.0.1"
                }
              ],
              "target_ids": [
                "CVE-1900-0001",
                "CVE-1900-0001",
                "CVE-1900-0001",
                "CVE-1900-0001"
              ],
              "timestamp": "2024-01-24T10:00:00.000Z"
            }

Platform details
Include any relevant details like OS, browser, versions, etc.

Additional context
related to #802

Activity

  1. sei-vsarvepalli commented on Aug 26, 2025

    @sei-vsarvepalli
    Contributor

    Hello @tschmidtb51

    Thanks for this catch. This may also be a limitation of the pydantic. Still looking into it. When testing it with "unique_items" it does not raise Error is where I am rn.

  2. bernhardreiter commented on Aug 26, 2025

    @bernhardreiter
    Contributor

    I can work on it, in the next days.

  3. added
    integrationRelated to integration of SSVC into another framework or system
    on Aug 26, 2025
  4. added a commit that references this issue on Aug 26, 2025
  5. added this to the 2025-09 milestone on Sep 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

bugSomething isn't workingintegrationRelated to integration of SSVC into another framework or system

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions