Universe

Calculate CVSS v4.0 scores from Typst. Useful for automatically calculating CVSS scores in cyber security reports.

The code of this package is based on the FIRST CVSSv4 calculator.

Usage

The calculate-cvss-score function can be given a CVSSv4 vector, and returns the CVSS score as a two-digit floating number.

#import "@preview/vuln-calc:1.0.0": *

// Returns 8.7
#calculate-cvss-score(
  "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
)

The function also accepts dictionaries with metric keys in either upper or lower case:

// Returns 7.2 
#calculate-cvss-score((
  av: "A",
  ac: "L",
  at: "N",
  pr: "N",
  ui: "N",
  vc: "L",
  vi: "H",
  va: "L",
  sc: "N",
  si: "N",
  sa: "N",
))

Additionally, the package includes functions to get the severity based on the CVSS vector or score:

// Returns "High"
#calculate-cvss-severity("CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") 

// Returns "Critical"
#get-cvss-score-severity(9.2)