Published advisories contain sufficient information for users to assess risk, identify affected versions, and apply mitigations or fixes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.