Cybersecurity

Standard

Common Security Advisory Framework Version 2.0

A language to exchange Security Advisories formulated in JSON. CSAF v2.0 is the definitive reference for the language which supports creation, update, and interoperable exchange of security advisories as structured information on products, vulnerabilities and the status of impact and remediation among interested parties.

Produced by:

OASIS Common Security Advisory Framework (CSAF) TC

Voting history:

November 2022

Voting History for OASIS Standard, November 2022

Voting History for Approved Errata 01, January 2024

OASIS Standard:

OASIS Standard 

Editable source (md)
HTML
PDF

JSON schemas:
Aggregator
CSAF
Provider

Distribution ZIP file

Approved Errata 01

Editable source (md)
HTML
PDF

JSON schemas:
Aggregator
CSAF
Provider

ZIP distribution files

Cite as:

[csaf-v2.0]

Common Security Advisory Framework Version 2.0. Edited by Langley Rock, Stefan Hagen, and Thomas Schmidt. 18 November 2022. OASIS Standard. https://docs.oasis-open.org/csaf/csaf/v2.0/os/csaf-v2.0-os.html. Latest stage: https://docs.oasis-open.org/csaf/csaf/v2.0/csaf-v2.0.html.

[csaf-v2.0-errata01]

Common Security Advisory Framework Version 2.0 Errata 01. Edited by Langley Rock, Stefan Hagen, and Thomas Schmidt. 26 January 2024. OASIS Approved Errata. https://docs.oasis-open.org/csaf/csaf/v2.0/errata01/os/csaf-v2.0-errata01-os.html. Latest stage: https://docs.oasis-open.org/csaf/csaf/v2.0/errata01/csaf-v2.0-errata01.html.

No results with the selected filters