csaf acknowledgement aggregate-severity branch branch-category csaf cve-flag cvss-v3 cwe distribution document full-product-name hash hash-collection involvement involvement-party involvement-status note note-category product-group product-status product-tree publisher publisher-category reference reference-category relationship relationship-category remediation remediation-category reporter-id restart-category restart-required revision score threat threat-category tlp-label tracking tracking-status vulnerability vulnerability-id