fixed schema errors causing CI validation test errors and warnings

Author: david-waltermire

schema/v5.0/CVE_JSON_5.0_schema.json

@@ -1,7 +1,6 @@
 {
     "$schema": "http://json-schema.org/draft-07/schema#",
     "$id": "https://cve.org/cve/record/v5_00/",
-    "type": "object",
     "title": "CVE JSON record format",
     "description": "cve-schema specifies the CVE JSON record format. This is the blueprint for a rich set of JSON data that can be submitted by CVE Numbering Authorities (CNAs) and Authorized Data Publishers (ADPs) to describe a CVE Record. Some examples of CVE Record data include CVE ID number, affected product(s), affected version(s), and public references. While those specific items are required when assigning a CVE, there are many other optional data in the schema that can be used to enrich CVE Records for community benefit. Learn more about the CVE program at [the official website](https://cve.mitre.org). This CVE JSON record format is defined using JSON Schema. Learn more about JSON Schema [here](https://json-schema.org/).",
     "definitions": {
@@ -738,7 +737,7 @@
             "description": "A description with lang set to an English language (en, en_US, en_UK, and so on).",
             "properties": {"lang": {"$ref": "#/definitions/englishLanguage"}},
             "required": ["lang"],
-            "additionalProperties": false
+            "$comment": "Cannot use additionalProperties: false here, as this prevents the other properties used by /definitions/description."
         },
         "descriptions": {
             "type": "array",
@@ -1150,6 +1149,7 @@
         {
             "title": "Published",
             "description": "When a CNA populates the data associated with a CVE ID as a CVE Record, the state of the CVE Record is Published.",
+            "type": "object",
             "properties": {
                 "dataType": {
                     "$ref": "#/definitions/dataType"
@@ -1187,6 +1187,7 @@
         {
             "title": "Rejected",
             "description": "If the CVE ID and associated CVE Record should no longer be used, the CVE Record is placed in the Rejected state. A Rejected CVE Record remains on the CVE List so that users can know when it is invalid.",
+            "type": "object",
             "properties": {
                 "dataType": {
                     "$ref": "#/definitions/dataType"