Post

Indeed this is my concern with having yet another vulnerability database it could lead to some manufacturers playing the system and deciding that they get a better result for their product out of one or the other. We already have Apache not releasing scores

Multiple countries already have their own databases, I don't see too much of a risk of having one based in the EU. Fragmentation yes, but I would imagine correlation would be possible?