Ability to include vuln information: Severity, CVSS Score, CVSS Attack Vector, etc.

[grokify]

Having the vulnerability information in the schema including Severity, CVSS Score, and CVSS Attack Vector is very useful for my use cases.

Does the OpenVEX spec have the ability to represent this, in a similar way that the NVD CVE API does?