Tag · cisa-kev

Posts on cisa-kev

2 posts tagged cisa-kev.

2026-05-19

Only 7.5% of CVEs are expressible in package coordinates

Package scanners aren't missing KEV by accident. KEV-with-ransomware is structurally less package-representable than the baseline corpus.

entity-resolutiongoldenmatchsecurityvulnerabilitiescisa-kevepss
2026-05-15

88% of actively-exploited CVEs aren't in any package ecosystem

Re-running the OSS vuln reconciliation at 6.1M records and 40 sources surfaces a structural blind spot in every package-level scanner.

entity-resolutiongoldenmatchsecurityvulnerabilitiescisa-kev
← All tagsAll posts