feat: support CVSS v4

[jeremylong]

No description provided.

[jeremylong]

seriously - the NVD isn't using the https://www.first.org/cvss/cvss-v4.0.json

There is nothing in the schema for vulnerableSystemConfidentiality... Time to put in some aliases...

[chadlwilson]

seriously - the NVD isn't using the https://www.first.org/cvss/cvss-v4.0.json

There is nothing in the schema for vulnerableSystemConfidentiality... Time to put in some aliases...

Perhaps it's just bugs they will fix rather than something that is intended and that folks should code against? If it's not in the schema I guess it can be expected to go away any time... In the announcement of the support, they didn't even mention that the schema had been updated to 2.2.0 or anything like that. https://nvd.nist.gov/general/news/cvss-v4-0-official-support

[jeremylong]

I've updated the @JsonProperty to point to what the NVD is using and put an @JsonAliasusing what is in the schema.