</syntaxhighlight>
An important key in the collection is that of <tt>vulnerable_product</tt>. It contains an array of the ''Common Platform Enumeration'' of the affected piece pieces of software, and can potentially be matched (along with the affected product's version(s)) to packages in the Funtoo portage meta-repo.
This is the bird's eye view of what a [https://nvd.nist.gov/products/cpe CPE] is: