GoCmdModulePath is the pseudo-module path string used to describe vulnerabilities in the go command.

GoEcosystem indicates the Go ecosystem.

GoStdModulePath is the pseudo-module path string used to describe vulnerabilities in the Go standard library.

RangeTypeSemver indicates a semantic version as defined by SemVer 2.0.0, with no leading "v" prefix.

ReferenceTypeAdvisory is a published security advisory for the vulnerability.

ReferenceTypeArticle is an article or blog post describing the vulnerability.

ReferenceTypeEvidence is a demonstration of the validity of a vulnerability claim.

ReferenceTypeFix is a source code browser link to the fix (e.g., a GitHub commit).

ReferenceTypePackage is a home web page for the package.

ReferenceTypeReport is a report, typically on a bug or issue tracker, of the vulnerability.

ReferenceTypeWeb is a web page of some unspecified kind.

Affected gives details about a module affected by the vulnerability.

Credit represents a credit for the discovery, confirmation, patch, or other event in the life cycle of a vulnerability.

DatabaseSpecific contains additional information about the vulnerability, specific to the Go vulnerability database.

EcosystemSpecific contains additional information about the vulnerable module for the Go ecosystem.

Entry represents a vulnerability in the Go OSV format, documented in https://go.dev/security/vuln/database#schema.

Module identifies the Go module containing the vulnerability.

Package contains additional information about an affected package.

Range describes the affected versions of the vulnerable module.

RangeEvent describes a single module version that either introduces or fixes a vulnerability.

Reference is a reference URL containing additional information, advisories, issue tracker entries, etc., about the vulnerability.

Ecosystem identifies the overall library ecosystem.

RangeType specifies the type of version range being recorded and defines the interpretation of the RangeEvent object's Introduced and Fixed fields.

ReferenceType is a reference (link) type.