Again NVD lists the wrong info for a #curl advisory in nvd.nist.gov/vuln/detail/CVE-2… which now has the ripple effect that #Debian also lists the wrong versions as affected, in security-tracker.debian.org/tr…
I wish more orgs just read our canonical sources instead.