• sunbeam60@feddit.uk
    link
    fedilink
    arrow-up
    1
    ·
    11 hours ago

    Ah, well I certainly agree with the general notion you’ve stipulated. My question for data was regarding the quality of the CVEs, not the concept.

    • nonentity@sh.itjust.works
      link
      fedilink
      arrow-up
      2
      ·
      10 hours ago

      CVEs are allocated to any issue that gets flagged as a potential security issue; their severity is a subcategory, and their impact and relevance are wildly dependent on context and peripheral elements.