paperbay.org Mastodon - https://paperbay.org/users/a/statuses/111970476811551136

@singe Yep that’s why the CVE allocation can be done by the finder with another CNA ;-) I remember one case with IBM too where they were forced to release their CVE before. I think the mindset of a single CVE should be moved to a set of CVEs or notes combined.