2026-06-01 14:56 UTC
Replies (3)
-
@jbm@infosec.exchange 2026-06-02 07:54
@gcve@social.circl.lu I am not sure I get it. (CPEs suck big time and I hate them with a deep passion, but PURLs have a much more limited scope, so I have to live with CPEs for the foreseeable future. This being said...) ...The main problem I see with CPE are not "CPE out of thin air", or "in some dictionary", just for the pleasure of listing CPE. The pb is G/CVE 1/ without any CPE, 2/ or without useful CPE, 3/ or with an incorrect CPE. This is what I have to deal with daily. I don't understand how this CPE editor is helping in this regard. Is there some link to vulns that I'd de missing?
-
@westonsteimel@hachyderm.io 2026-06-02 11:12
@gcve@social.circl.lu Is there a way to propose package url mappings? When I drill down into a product there is a table for PURL mappings, but I'm not seeing a way to propose mappings for that particular section yet.
-
@westonsteimel@hachyderm.io 2026-06-08 08:41
@gcve@social.circl.lu Is there a way to propose an alias relationship or otherwise merge two separate vendors? For instance in the current dataset we have both "Oracle" and "Oracle Corporation" with some products existing under both, and it would be useful to have some way to unify these.