• sunbeam60@feddit.uk
    link
    fedilink
    arrow-up
    1
    ·
    2 days ago

    Ah, well I certainly agree with the general notion you’ve stipulated. My question for data was regarding the quality of the CVEs, not the concept.

    • nonentity@sh.itjust.works
      link
      fedilink
      arrow-up
      4
      ·
      2 days ago

      CVEs are allocated to any issue that gets flagged as a potential security issue; their severity is a subcategory, and their impact and relevance are wildly dependent on context and peripheral elements.