Skip to content

Identifying priorities for version 6.0.0 #437

Closed
Closed
Identifying priorities for version 6.0.0#437

Description

@alilleybrinker
alilleybrinker
opened on Jul 24, 2025

While the QWG has not fully solidified the versioning guarantees of the CVE Record Format (see #418), there are nonetheless clearly changes which could only be done in a 6.0.0 version of the Record Format.

This issue is intended to serve as a tracking place for priorities which are being considered for a future version 6.0.0.

This would also involve establishing goals, such as:

  • Empower automation
  • Increase rigor

Activity

  1. github-project-automation
    added this to QWG Work Boardon Jul 24, 2025

  2. alilleybrinker commented on Jul 24, 2025

    @alilleybrinker
    alilleybrinker
    on Jul 24, 2025
    ContributorAuthor
    • Redesign the affected array to address limitations / problems.
      • Remove the cpes array.
      • Consider a new way to identify artifacts consistently (perhaps an adjacent affectedArtifacts array?)
      • Consider logical connectives inspired by the cpeApplicability block
      • Eliminate redundancy with the cpeApplicability block
      • Surely more...
  3. CVEProject
    locked and limited conversation to collaborators on Jul 24, 2025
  4. ccoffin
    converted this issue into a discussion #438 on Jul 24, 2025
  5. github-project-automation
    moved this to Done in QWG Work Boardon Jul 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions