vulnerability:
  vex:
    - security/vex/sencho.openvex.json