SSVC - Perl extension for SSVC (Stakeholder-Specific Vulnerability Categorization)

Synopsis

use SSVC;

$ssvc = SSVC->new(
  methodology              => 'cisa',
  exploitation             => 'active',
  automatable              => 'yes',
  technical_impact         => 'partial',
  mission_prevalence       => 'mission',
  public_well_being_impact => 'irreversible',
);

# Get the decision
say $ssvc->decision; # act

# Parse SSVC vector string
$ssvc = SSVC->from_vector_string('cisa', 'SSVCv2/E:A/A:Y/T:P/P:M/B:I/M:H/D:C/2025-01-01T00:00:00');

# Convert the SSVC object in "vector string"
say $ssvc; # SSVCv2/E:A/A:Y/T:P/P:M/B:I/M:H/D:C/2025-01-01T00:00:00

# Get the decision point value
say $ssvc->public_well_being_impact; # irreversible

# Convert SSVC in JSON in according of SSVC JSON Schema
$json = encode_json($ssvc);

Install

Using Makefile.PL:

To install SSVC distribution, run the following commands.

perl Makefile.PL
make
make test
make install

Using App::cpanminus:

cpanm SSVC

Documentation

• perldoc SSVC
• https://metacpan.org/release/SSVC

Copyright

• Copyright 2025 © Giuseppe Di Terlizzi