GCVE corrections to upstream data?

adulau · June 10, 2026, 10:06am

For tracking the issue open at CVElist/CVE Program

Clarifying the Process for Updating Incorrect CPE Values in CVE Records

opened 10:06AM - 10 Jun 26 UTC

We, GCVE, recently introduced a public service for contributing CPE values, avai…lable at https://cpe.gcve.eu/. We have also [discovered many CPE values with typographical errors](https://discourse.ossbase.org/t/gcve-corrections-to-upstream-data/1099) in existing CVE records, and we would like to know what the process would be to update those values automatically. We would welcome any idea on how we could propagate automatically this information to the CNA.

Maybe @zmanion has some good ideas.