VEXing Open Source Security: Vulnerability Data for Everything - Andrew Martin & Andres Vega
As CVEs proliferate and vulnerability scanners light up our open source projects, security teams are under increasing pressure that is pushed back onto maintainers, and we deserve better. And as we manage CVEs in our organisations is the quality of the data that we receive sufficient to manage the risk we are faced with every day? The machine-readable Vulnerability Exchange Format data standard may offer us a solution: defining the exploitability of vulnerabilities in the software and dependencies that we ship every day. Can we solve the high volume of false positives, halted releases, and late night? VEX may have the answer.
In this talk we
- Question the efficacy of current vulnerability management approaches
- Compare the options available for enterprise vulnerability assessment
- Propose a solution to the global CVE deluge
- Suggest a contextual analysis framework for open source software security
- Attempt to enable a brighter future for the industry
Related events & webinars
View allFluxCon Europe Join ControlPlane in Amsterdam!
One of KubeCon’s newest (and coolest) co-located events, with speakers from KLM, NatWest Group, Orange, and more!
FluxCon | Welcome + Opening Remarks - Stefan Prodan, Francesco Beltramini & Jorge Castro
Stefan Prodan and Francesco Beltramini of ControlPlane open FluxCon 2025 with Jorge Castro of the CNCF, setting out the day for the Flux community and the maintainers behind it.
GitOps Evolution Through the Lens of a Flux Maintainer - Stefan Prodan, ControlPlane
In this session, Stefan will share his experience as a maintainer of Flux CD and how he has seen GitOps evolve over the years. He will start with a brief history of GitOps from the early days of Flux CD to mainstream adoption.
Speak to an expert
Engage with world-leading AI and cloud security specialists