https://docs.oasis-open.org/csaf/csaf/v2.1/csaf-v2.1.html https://www.first.org/resources/papers/conf2025/0945-1020-Whats-New-in-CSAFv2.1-Justin-Murphy-and-Thomas-Schmidt.pdf
