Anyone who took this seriously is sitting on thousands of exploits and creds, but they didn’t and so they aren’t. It’s 18 months old at this point. We have since used it to find vulns in MS products and docker images. This is just Nuget…what about npm, PyPi, PowerShell gallery, Brew, Docker, …https://t.co/maLrU4lu8LIf a leading lab talks like 500 is a big number, it means they don’t have a clue about their own scale wrt cyber. CVE system is functionally pointless. Vulnerabilities can exist witho