paperbay.org Mastodon - https://paperbay.org/users/a/statuses/111970703957992418

@singe Of course, it’s possible. For example many CERTs are CNA and they often release CVEs for

various vendors. I know the practice is often to ask the vendor CNA before but sometime vendors are just silent even IBM ;-)