Red Hat has a CVE database tracking both fixed and unfixed vulnerabilities. OSV currently only includes data from RHSA, which contains only fixed vulnerabilities. It would be beneficial to include known affected vulnerabilities, including those that are unfixed.