Issues

• FYI: There is a Dark Reading Article linking to these user stories

  CVEProject/consumer-working-group#23 · Filter by author rjb4standards opened on Apr 20, 2026

• We need PURLs for commercial software products

  CVEProject/consumer-working-group#22 · Filter by author Tomalrich opened on Feb 16, 2026

• User Story: Leveraging the CVE Program to Bridge the NVD Enrichment Gap for CRA Compliance

  CVEProject/consumer-working-group#21 · Filter by author karsten-klein opened on Feb 1, 2026

• User story: Missing CPE names

  CVEProject/consumer-working-group#20 · Filter by author Tomalrich opened on Jan 24, 2026
  1

• User Story: How can we automate consumer use of CVEs with machine readable version ranges?

  CVEProject/consumer-working-group#19 · Filter by author Tomalrich opened on Jan 6, 2026
  5

• User Story: The Hidden Harm of Silent Patches

  CVEProject/consumer-working-group#18 · Filter by author zmanion opened on Nov 20, 2025

• User Story: To what extent do downstream Product inherit upstream Vulnerabilities?

  CVEProject/consumer-working-group#17 · Filter by author zmanion opened on Nov 20, 2025

• User Story: Security researcher for IT/Security software product

  CVEProject/consumer-working-group#15 · Filter by author boblord opened on Nov 10, 2025

• User Story: Product Architect – Energy Sector Software

  CVEProject/consumer-working-group#14 · Filter by author boblord opened on Nov 6, 2025
  2

• User story: OSV developer

  CVEProject/consumer-working-group#13 · Filter by author boblord opened on Nov 6, 2025

• User Story: CVEs that are published by mistake and not revoked

  CVEProject/consumer-working-group#12 · Filter by author gyehuda opened on Nov 5, 2025

• User Story: CVEs without CPE or PURL information

  CVEProject/consumer-working-group#11 · Filter by author gyehuda opened on Nov 5, 2025

• User Story: The CPE is too broad

  CVEProject/consumer-working-group#10 · Filter by author gyehuda opened on Nov 3, 2025

• User story: vulnerability management platform developer

  CVEProject/consumer-working-group#9 · Filter by author boblord opened on Oct 30, 2025

• Validate URLs entered in the references field against a standard URL format

  CVEProject/consumer-working-group#8 · Filter by author patrickmgarrity opened on Sep 30, 2025

• Please consider collaborating with OpenSSF on Vulnerability Disclosure Reporting

  CVEProject/consumer-working-group#7 · Filter by author rjb4standards opened on Sep 19, 2025

• Complete & Accurate CWE Data on CVE Records

  CVEProject/consumer-working-group#6 · Filter by author patrickmgarrity opened on Sep 19, 2025
  1

• Ensure CNA's publish their vulnerability disclosures publicly and all references comply with this requirement

  CVEProject/consumer-working-group#5 · Filter by author patrickmgarrity opened on Sep 19, 2025

• N/A / Null / Inaccurate information in the product, vendor and version fields.

  CVEProject/consumer-working-group#4 · Filter by author patrickmgarrity opened on Sep 18, 2025

• Reserved CVE's Published Timely

  CVEProject/consumer-working-group#3 · Filter by author patrickmgarrity opened on Sep 18, 2025
  4

• Consumers need reliable versions reported

  CVEProject/consumer-working-group#1 · Filter by author candacecandace opened on Sep 18, 2025
  5