TY - RPRT TI - The Cathedral and the Bazaar of Software Vulnerabilities: From the NVD to the CNAs AU - Siqi Zhang AU - Fabio Massacci AU - Mengyuan Zhang PY - 2026 UR - https://arxiv.org/abs/2607.05670 ID - 2607.05670 ER -