Datasetpublic

AriaAICompany/vuln-priority-lab

VulnPriority laboratory estate Synthetic 96-asset / dated KEV-EPSS fixture pack for the VulnPriority patch-backlog demo. Organization dataset and collection item are public. Live Gradio (alirezaaminzadeh/vuln-priority) and the organization card (AriaAICompany/vuln-priority) are queued until the Hugging Face daily Space-creation cap resets. Runnable Space source is stored in demo/. Collection: Aria AI — Cybersecurity. Generated data, seed 6, decision date 2026-03-01. Hostnames… See the full description on the dataset page: https://huggingface.co/datasets/AriaAICompany/vuln-priority-lab.

sourceHugging Facecc-by-4.0updated 6d agoView on Hugging Face

0likes93downloads

rootdataschema.json

schema.json29 linesDownload Raw Back to data

1{
2  "schema_id": "vulnpriority.asset_finding.v1",
3  "decision_date": "2026-03-01",
4  "snapshot_id": "lab-kev-epss-2026-03-01",
5  "seed": 6,
6  "required_assets": [
7    "asset_id",
8    "criticality",
9    "internet_exposure"
10  ],
11  "required_findings": [
12    "finding_id",
13    "asset_id",
14    "cve_id",
15    "package",
16    "version"
17  ],
18  "gold_policy": {
19    "must_this_week": "prod + (internet high/critical with KEV-as-of or EPSS>=0.60) or (dc/db critical + KEV-as-of)",
20    "unknown": "missing exposure or unmatched CVE",
21    "should_this_month": "remaining high-value or moderate EPSS/KEV",
22    "defer": "otherwise"
23  },
24  "notes": [
25    "EPSS is an exploitation estimate for a published window, not P(compromise of this asset).",
26    "KEV absence is not proof that nobody is exploiting the CVE.",
27    "Priority score is a transparent weighted sum, not a scientific probability."
28  ]
29}