10:25 <zimbatm> some researcher created a database of Java CVEs

10:25 <zimbatm> paper: https://arxiv.org/abs/1902.02595

10:25 <zimbatm> repo: https://github.com/copernico/msr2019

10:26 <zimbatm> it would be nice if a machine-readable format like that could become the standard

11:34 <Foxboron> zimbatm: well, there are.

11:35 <Foxboron> but they are not really used.

11:35 <Foxboron> https://github.com/CVEProject/automation-working-group/tree/master/cve_json_schema

11:58 <andi-> Foxboron: are you aware of the sources for those files? Are they somehow synced with the NV database? The official NVD JSON export lacks a bunch of issues :/

12:03 <Foxboron> andi-: believe they are missing the fields because the info lack

12:03 <Foxboron> which is the main problem

12:04 <andi-> It has been a while since I looked at it but it didn't really make sense (back then) why specific issues were missing. Probably some issue in the XML->Json conversion is what I recall.