**Approach (brief)** Calculate a priority score combining CVSS (0–10), exploitability multiplier (exploit-db-known), asset-criticality (1–5 scale), and recency decay from last-seen-days. Sort descending by final score.**Scoring formula** text
base_exploitability = cvss / 10
exploitability = base_exploitability * (2 if exploit_db_known else 1)
recency_factor = 1 / (1 + last_seen_days / 30) # half-life ~30 days
raw_score = exploitability * cvss # emphasize high CVSS
final_score = raw_score * exploitability * recency_factor * (asset_criticality / 3)
python
from typing import List, Dict
def prioritize(vulns: List[Dict]) -> List[Dict]:
def score(v):
cvss = float(v.get('cvss', 0))
exploit_known = bool(v.get('exploit-db-known', False))
ac = float(v.get('asset-criticality', 3)) # default medium
days = float(v.get('last-seen-days', 0))
base_exp = cvss / 10.0
exp = base_exp * (2.0 if exploit_known else 1.0)
recency = 1.0 / (1.0 + days / 30.0)
raw = exp * cvss
final = raw * exp * recency * (ac / 3.0)
return final
return sorted(vulns, key=lambda x: score(x), reverse=True)
