Proposed New Idea/Feature (required)
A bottleneck in the CVE assignment process is frequently in the communication between the CNA and the project. A common pattern is that the CNA needs to find how to report the potential vulnerability to the project by finding specific instructions in its git repository. The method is frequently sending an email.
This idea is to standardize the mechanisms for communication between CNAs and projects so it is trivial for CNAs to find how to report a finding to a project and also how to receive the responses.
Proposed New Idea/Feature (required)
A bottleneck in the CVE assignment process is frequently in the communication between the CNA and the project. A common pattern is that the CNA needs to find how to report the potential vulnerability to the project by finding specific instructions in its git repository. The method is frequently sending an email.
This idea is to standardize the mechanisms for communication between CNAs and projects so it is trivial for CNAs to find how to report a finding to a project and also how to receive the responses.