Post #3827887
2026-07-15 08:01 UTC
@darakian@fosstodon.org @adulau@infosec.exchange @gcve@social.circl.lu Yeah, I get that it is a quite different approach than we have been used to, but I am optimistic it can work. We shall see. I did just add a comment to the proposal around maybe offering a view in future for those that want to trust the community curations that auto-merges them with the 0 GNA records to present a unified CVE view so that all consumers don't have to reimplement that logic. But if a particular consumer disagrees with even that view for a particular record then yeah the solution is to fork to their own namespace with an opposes or equals relationship and then prefer that data in their own feeds. I do understand the concern though, and I know you have a lot of experience with this, so I think we all really appreciate the feedback.
Replies (1)
-
@adulau@infosec.exchange 2026-07-15 08:18
@westonsteimel@hachyderm.io @darakian@fosstodon.org That’s great feedback. We will also update the FAQ about this on gcve.eu. Technically is just documenting more (than hiding the information behind a closed-door dispute process) and every users/orgs can decide which source they take. Vulnerability-lookup software stack already includes it. @gcve@social.circl.lu