The CSAF 2.1 schema has changed and references now ssvc_v2 and cvss_v4_0_1. All references to SSVC and CVSS4 should be changed to the new schemas