Tag · security

Posts on security

4 posts tagged security.

2026-05-19

Only 7.5% of CVEs are expressible in package coordinates

Package scanners aren't missing KEV by accident. KEV-with-ransomware is structurally less package-representable than the baseline corpus.

entity-resolutiongoldenmatchsecurityvulnerabilitiescisa-kevepss
2026-05-17

The OSS vuln-DB 'consensus' is a redistribution artifact

Cross-source remediation agreement looks near-perfect at 99-100%. De-duplicate the mirrors and it collapses to 70%. The lift is 1,898x.

entity-resolutiongoldenmatchsecurityvulnerabilitiesmethodology
2026-05-15

88% of actively-exploited CVEs aren't in any package ecosystem

Re-running the OSS vuln reconciliation at 6.1M records and 40 sources surfaces a structural blind spot in every package-level scanner.

entity-resolutiongoldenmatchsecurityvulnerabilitiescisa-kev
2026-04-10

Reconciling 15 OSS Vulnerability Databases

Cross-database ER across OSV, GHSA, PyPA, RustSec, Go vulndb — 869k records, 608k canonical vulns, and one structural blind spot.

entity-resolutiongoldenmatchsecurityvulnerabilitiespython
← All tagsAll posts