@basefortify.bsky.social🔎 A CPE identifies a product. It does not, by itself, say that the product is vulnerable.
NVD configurations add applicability, while Affected Products can provide useful vendor and version information directly from CVE records.
@basefortify.bsky.socialCPEs, Known Affected Configurations, Affected Products… what exactly is the difference? 🤔
We take a closer look at how these pieces fit together — and what they mean for vulnerability matching.
@qiita-trending.bot.chrs.to
@happy-homhom.bsky.social@happy-homhom.bsky.social@happy-homhom.bsky.social
@hnbest.bsky.socialActively exploited sandbox RCE in all Chromium versions https://nvd.nist.gov/vuln/detail/cve-2026-85046
comments #nvd.nist.gov
@chillygopher.bsky.socialI have been getting into building my portfolio site now
Starting with my project; go-nvd!, an API wrapper for the NVD NIST REST APIs, Lets you interact with the CVE APIs and CVE History APIs
Read the Project Page at: chillygopher.codeberg.page/projects/go-...