3 ms·
I’m wondering why maintainers of open source projects don’t register as CNAs with Mitre for their projects and also why they don’t file a dispute on the CVE wit
by levinebw 2y ago
I’m wondering why maintainers of open source projects don’t register as CNAs with Mitre for their projects and also why they don’t file a dispute on the CVE with Mitre which is the source for NVD and GHSA. This would help eliminate or reduce the impact of frivolous CVEs.