{"uid":"cap_Ax6BtDgNJSqP5yDo2_Tfp","slug":"cyclonedx-vex-explicit-integer-release-status-intersection-4cf8025c","name":"CycloneDX VEX Explicit Integer Release Status Intersection","description":"Resolve affected/unaffected/unknown status for supplied integer product releases and expose overlapping contradictions.","url":"https://detect.halowerk.com/v1/F-TD2000-DOCUMENTS-01/cyclonedx-vex-explicit-integer-release-status-intersection?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"artifact":{"type":"object","required":["vexStatus"],"properties":{"vexStatus":{"type":"object","required":["data","claim"],"properties":{"data":{"type":"object","required":["products","affects"],"properties":{"affects":{"type":"array","items":{"type":"object","required":["ref","versions"],"properties":{"ref":{"type":"string","maxLength":64},"versions":{"type":"array","items":{"type":"object","required":["min","max","status"],"properties":{"max":{"type":"integer","maximum":1000000,"minimum":0},"min":{"type":"integer","maximum":1000000,"minimum":0},"status":{"enum":["affected","unaffected","unknown"]}},"additionalProperties":false},"maxItems":32,"minItems":0}},"additionalProperties":false},"maxItems":64,"minItems":0},"products":{"type":"array","items":{"type":"object","required":["ref","version"],"properties":{"ref":{"type":"string","maxLength":64},"version":{"type":"integer","maximum":1000000,"minimum":0}},"additionalProperties":false},"maxItems":64,"minItems":1}},"additionalProperties":false},"claim":{"anyOf":[{"type":"null"},{"type":"object","required":["products"],"properties":{"products":{"type":"array","items":{"type":"object","required":["ref","status","version"],"properties":{"ref":{"type":"string","maxLength":20000},"status":{"type":"string","maxLength":20000},"version":{"type":"integer"}},"additionalProperties":false},"maxItems":4096}},"additionalProperties":false}]}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Q5KhGJEy29G2alf1rkiv4","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Resolves affected/unaffected/unknown VEX status for integer-versioned product releases and detects contradictions between data and claim entries.","exampleAgentPrompt":"Check whether product 'acme-core' at integer release version 42 is affected, unaffected, or unknown based on these VEX ranges — affected from 10 to 50, unaffected from 40 to 60 — and flag any contradictions between those ranges and our existing claim that version 42 is unaffected.","exampleUseCases":[{"title":"Vulnerability triage for software release","prompt":"We ship 'payment-service' and I need to know if release version 317 is affected by this CVE — our VEX data says affected from 300 to 350 and unaffected from 310 to 320. Resolve the status and tell me if those ranges contradict each other."},{"title":"Auditing conflicting VEX claims before publication","prompt":"Before we publish our VEX document for 'infra-agent', can you check whether any of our status ranges for integer versions 0 to 1000 overlap or contradict? We have affected from 100 to 500, unaffected from 400 to 600, and a claim that version 450 is unaffected."},{"title":"Batch status resolution for multiple products","prompt":"I have three products — 'core-lib' at version 88, 'auth-module' at version 204, and 'api-gateway' at version 15 — with VEX status ranges defined. Resolve each one's affected/unaffected/unknown status and highlight any contradictions across those ranges."}],"resultDescription":"Returns the resolved VEX status (affected, unaffected, or unknown) for each supplied product and integer version, along with any detected contradictions where status ranges overlap or claims conflict with the underlying data.","failureModes":["Version integer out of range (0–1,000,000 bounds exceeded) → schema validation error","Products array empty (minItems:1 violated) → request rejected","Affects version range where min > max → logical contradiction may be flagged or rejected","Too many products or affects entries (maxItems:64 exceeded) → schema validation error","Claim references a product ref not present in products array → unresolvable cross-reference","Malformed ref strings exceeding maxLength:64 → schema validation error"],"whenToPreferThis":"Use this endpoint when you need to resolve vulnerability exposure status for software products that use integer (not semver) versioning and need explicit contradiction detection between VEX data ranges and claim assertions. Ideal for CycloneDX VEX workflows where overlapping affected/unaffected ranges must be surfaced before publication or triage decisions. Prefer this over generic SBOM tools when the version scheme is strictly integer and claim/data cross-validation is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-01T06:45:14.429Z","isFirstParty":false,"canonicalSlug":"cyclonedx-vex-explicit-integer-release-status-intersection-4cf8025c"}