-
From today's SPWG meeting, the current CVE JSON format (unsurprisingly) almost implements VEX, as defined here:
https://www.cisa.gov/sites/default/files/2023-04/minimum-requirements-for-vex-508c.pd…
-
Hi @rainer-exxcellent et all,
I encountered an issue when trying to run the Secvisogram app on Ubuntu.
The `host.docker.internal` hostname is not available on Linux, which causes the applicatio…
-
We need to check what needs to be done to get conformance with the latest version of the standard which is at: https://docs.oasis-open.org/csaf/csaf/v2.0/csaf-v2.0.html
-
**What would you like to be added**:
The RedHat provider currently uses the v2 OVAL files for RedHat vulnerability data; however, those will only continue to be updated until the end of 2024. We n…
-
https://access.redhat.com/security/data/csaf/v2/advisories/2023/
-
Each of the producer mostly has the same format or/and errors in validation, thus I pick just some examples
This was a manual testing with commit https://github.com/csaf-tools/CVRF-CSAF-Converter/c…
-
Example:
Open https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-023-05.json in the viewer.
Expand Vulnerabilities and then Remediations
Problem…
-
-
### Relation Name
signature
### Description
Refers to a resource that contains the context's cryptographic signature.
### Reference
https://docs.oasis-open.org/csaf/csaf/v2.0/os/csaf-v2.0-os.html…
-
# What happened?
I tried to test the `csaf_aggregator` by building and just running it without any parameter, in particular without a path to a config file. Then, of course, the aggregator was lookin…