Automating Python Software Foundation vulnerability infrastructure


            
        June 24, 2024
    
    
Automating Python Software Foundation vulnerability infrastructure


        The Python Software Foundation is a CVE Numbering Authority which manages vulnerability data for CPython and pip. This article describes our vulnerability data infrastructure for keeping CVE and OSV records up-to-date with the latest metadata.
Read more: https://sethmlarson.dev/security-developer-in-residence-report-38

    
                                Don't miss what's next. Subscribe to sethmlarson.dev:
                            
                        
                    Email
                    *
                
                
                    ← Newer
                
                Thoughts on “Lockdown Mode”: the feature that stops BLASTPASS
            
        
                    Older →
                
                Bringing supply chain security (and stickers!) to PyCon US 2024
            
        
                Add a comment:
              
            
    Posting this comment will subscribe you to this newsletter with the email address you enter.


                Share this email:
                
                
                                Share on Mastodon
                            
                        
                                Share on Bluesky