# repository-advisory-vulnerability

A product affected by the vulnerability detailed in a repository security advisory.

**Type:** object

## Fields

| Field | Type | Required | Description |
|-------|------|----------|-------------|
| `package` | object | Yes | The name of the package affected by the vulnerability. |
| `vulnerable_version_range` | string | Yes | The range of the package versions affected by the vulnerability. |
| `patched_versions` | string | Yes | The package version(s) that resolve the vulnerability. |
| `vulnerable_functions` | string[] | Yes | The functions in the package that are affected. |

## Nested Fields

### `package`

| Field | Type | Required | Description |
|-------|------|----------|-------------|
| `ecosystem` | [security-advisory-ecosystems](security-advisory-ecosystems.md) | Yes |  |
| `name` | string | Yes | The unique package name within its ecosystem. |

