OASIS Common Security Advisory Framework (CSAF) TC

Dear colleagues,

Daniel Stenberg (curl project) posted on Mastodon:

> Hello people involved in distros and/or CVEs! Is CSAF something you care about? Should projects such as #curl bother about it and perhaps even provide CVE data in this format?

Please take the opportunity to share your opinion and provide a bit more visibility to that discussion.

Best wishes,
Thomas Schmidt

And here is the missing link to that post:
https://mastodon.social/@bagder/115463901335261692


Original Message:
Sent: 10/30/2025 4:10:00 PM
From: Thomas Schmidt
Subject: CSAF upstream: Question of the curl project

Dear colleagues,

Daniel Stenberg (curl project) posted on Mastodon:

> Hello people involved in distros and/or CVEs! Is CSAF something you care about? Should projects such as #curl bother about it and perhaps even provide CVE data in this format?

Please take the opportunity to share your opinion and provide a bit more visibility to that discussion.

Best wishes,
Thomas Schmidt