Hi, does anyone know of a project that will turn installed products / packages into CPEs? Wazuh has this: https://documentation.wazuh.com/current/user-manual/capabilities/vulnerability-detection/cpe_helper.html#cpe-helper-schema

I wrote one once (not publicly available). I didn’t see a perfect way to do it, so it involved a lot of heuristics.