Capturing Software Vulnerability Data in SPDX 3.0 Blog Capturing Software Vulnerability Data in SPDX 3.0