Coordinated Vulnerability Disclosure
A security process in which vulnerability finders, vendors or maintainers, and the public share vulnerability information in an orderly manner according to an agreed timeline, with the aim of limiting the spread of information before a fix is ready.
Timeline (last 90 days)
Coordinated vulnerability disclosure (CVD) is a security community convention in which finders privately notify maintainers before publicly disclosing vulnerability details, usually giving a fix window of about 90 days.
OSS Scanner sends reports privately to maintainers, consistent with the private notification principle of CVD.
Coordinated Vulnerability Disclosure (CVD) refers to the process of orderly sharing vulnerability information among discoverers, vendors/maintainers and the public according to an agreed timeline, aimed at limiting information spread before a fix is ready and ensuring downstream parties have enough time to respond.
All Facts (3)
Coordinated vulnerability disclosure (CVD) is a security community convention in which finders privately notify maintainers before publicly disclosing vulnerability details, usually giving a fix window of about 90 days.
50%UnverifiedOSS Scanner sends reports privately to maintainers, consistent with the private notification principle of CVD.
50%UnverifiedCoordinated Vulnerability Disclosure (CVD) refers to the process of orderly sharing vulnerability information among discoverers, vendors/maintainers and the public according to an agreed timeline, aimed at limiting information spread before a fix is ready and ensuring downstream parties have enough time to respond.
50%