The CSAF file is always connected to one particular certain advisory and a provided advisory may include things like a number of solution version(s) and one or more components, with regards to the item type and update https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812