Imply Interview Question

How would you track open source CVE notifications and remediation.