Reading an ML Library CVE: What to Extract Beyond the CVSS Score

ML library CVEs are usually scored against a generic threat model that doesn't match how the library is used in production AI systems. Here's what to actually evaluate.