GCVE BCP-05-X-04 - Vulnerability Handling and Advisory Publication State

GCVE
1

GCVE BCP-05-X-04 — Vulnerability Handling and Advisory Publication State

Its purpose would be to represent the current snapshot, while BCP-05-X-03 remains the historical timeline.

Some state ideas:

  • not-public
  • embargoed
  • scheduled
  • published
  • withdrawn
  • superseded

The current challenge is to define embargoed. Means that a publication could be have done already done to a private group. So those state could be combined. We saw also case of publication which were limited to a trusted group and never going fully public.