FedTrust-CVDv2 ties vulnerability evidence to approved disclosure actions
A reference implementation accepted all 25 valid fixtures and rejected all 650 invalid fixtures.
Stories per day · 30 days
2 RSS
Relatedvulnerability-disclosure2alpr1coordinated-disclosure1cve1evidence-validation1flock1php2shell1privacy1surveillance1
5 stories, newest first · one card per story
Stories tagged #cna
Flock can now issue CVEs for its own products. Should we trust it?
Flock Safety became a CVE Numbering Authority for vulnerabilities in its own surveillance products.
Inside the Advisory Database and what happens when vulnerability volume breaks records
GitHub says record vulnerability volume — 1,560 reviewed advisories published in May 2026 — has stretched advisory review times to weeks, urging better report quality.
4
CISA Charts New "Quality Era" for Global CVE Program
CISA outlined a quality framework for the CVE program as 2026 disclosures approach a projected 96,000.
Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920
Tomas Hoger asks oss-security whether GitHub or Red Hat will assign a CVE for Emacs's incomplete fix of arbitrary code execution bug CVE-2024-53920.