Hi, the Debian Security team periodically gets requests and/or bug reports about the OVAL exports, and our general stance is that although we can't provide support for them, I'll gladly review and accept PRs on the OVAL generation code if people are interested in fixing whatever issues they find on their end. Cheers, -- Seb