The CSAF file is always connected to one precise advisory along with a given advisory may perhaps include things like a number of product version(s) and one or more parts, based on the product or service sort and update https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812