There needs to be more governance and validation on who can file a CVE and what counts as 1. This is why I'm not so much for automated scanners and security sy

There needs to be more governance and validation on who can file a CVE and what counts as 1. This is why I'm not so much for automated scanners and security systems. It's easy to abuse. From the comments, some of the users of these systems have no manual escape route either, which is worse. A system is made for its users - not the other way around!?