https://www.techradar.com/news/google-wants-to-create-a-standard-vocabulary-for-describing-security-vulnerabilities