The Python Software Foundation has been authorized by the CVE Program as a CVE Numbering Authority (CNA)

Long-term we’d like to add other projects under our scope but because we’re just getting started with CNA operations we want to be sure the workload matches our ability before adding more projects.

We’ll also be drafting guidance around CNA operations, so maybe around that time we can reevaluate adding more projects.

3 Likes