Chainguard gains authority to assign CVEs to qualifying Athena findings
Chainguard can now assign CVEs to qualifying Athena findings, including open source flaws fixed upstream without an identifier.
By RuntimeWire Staff · Published
Primary source: Chainguard via PR Newswire
Why it matters
Chainguard can give certain previously unnumbered flaws a CVE record that scanners can use. Its planned first disclosures will test the accuracy of those records and the path from finding to fix.
Dan Lorenc (@lorenc_dan) has spent years building Chainguard to supply enterprises with hardened open source software. On September 22nd, Chainguard announced through PR Newswire that it had gained a different kind of responsibility: authority to assign CVE identifiers to qualifying vulnerabilities handled by its Athena coalition.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.