Uploaded image for project: 'Security Data'
  1. Security Data
  2. SECDATA-1111

Question Regarding CVE-2024-24791 and Its Removal from VEX

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • Very Likely
    • 0

      I noticed that CVE-2024-24791 is available on both the Red Hat website
      and the Security Data API:

      However, according to the VEX deletion record, this CVE was removed on
      2025-07-17:

      $ curl -s https://security.access.redhat.com/data/csaf/v2/vex/deletions.csv | grep cve-2024-24791
      "2024/cve-2024-24791.json","2025-07-17T13:48:37+00:00"
      

      Could you please clarify why it was removed from VEX?

      Also, are there different criteria for publishing data across the web
      interface, the Security Data API, and the VEX feed?

              chhan@redhat.com Chuntao Han
              mainek00n Norihiro Nakaoka
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: