VulnerableCode is an open-source database aimed at providing accessible information on vulnerabilities in open source software packages. It focuses on improving the management of vulnerabilities by using Package URLs as unique identifiers and aims to reduce false positives in vulnerability data. Currently under active development, it offers tools for data collection and refinement to enhance security in the open source ecosystem.
NIST has announced that all Common Vulnerabilities and Exposures (CVEs) published before January 1, 2018, will be classified as "deferred" in the National Vulnerability Database. This decision aims to prioritize the analysis of newer vulnerabilities while indicating that older ones still require attention from organizations for remediation.