All of the Contributors to the ICASI Common Vulnerability Reporting Framework (CVRF) Specification have formally agreed to the following licensing terms:

“The undersigned grants ICASI a perpetual, worldwide, non-exclusive, no-charge, royalty-free, copyright license, without any obligation for accounting, to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute, its contributions to the Common Vulnerability Reporting Framework (“Specification”) to the full extent of its copyright interest in the Specification.

If the undersigned has patent claims that are necessarily infringed by a conformant implementation of the Specification, it will make those patent claims available under reasonable and non-discriminatory terms without royalty, which may be fulfilled by a covenant not to assert or a license, solely for the purpose of implementing the specification itself. Necessary claims are those claims in any patent or patent application in any jurisdiction in the world that would necessarily be infringed by a conformant implementation of the specification (including the required elements of optional portions), there being no commercially reasonable non-infringing alternative. If the undersigned assigns or transfers ownership or control of a patent claim that is subject to this commitment, that entity will use reasonable efforts, but without requiring a patent search, to have the assignee or transferee to agree to be bound to this commitment.”