Vulnerability Disclosure Reporting is the “STANDARD” way to communicate vulnerabilities
The term "VEX" has been receiving some wide-spread press coverage due to the efforts of a few people with a vested interest in seeing VEX get traction and the efforts of Allan Friedman promoting the VEX concept which he introduced while working at NTIA. I'm not aware of any working, production implementations of "CSAF VEX" that satisfy Executive Order 14028..
Energy Central…