CPE id for Asio

[maxbrito500]

Hello,

I'm building a BoM (Bill of Materials) and for each open source library is necessary to include the appropriate CPE id from the NIST database so that open source vulnerability tools can automatically alert in case of new vulnerabilities that are published like this recent example that was connected to Asio: https://nvd.nist.gov/vuln/detail/CVE-2020-13616

Was looking on the CPE database from NIST and Asio is not yet listed there yet: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=asio

I'm supposing that the appropriate CPE id for Asio could be either:

cpe:2.3:a:asio_project:asio:{version}:*:*:*:*:*:*:*

or

cpe:2.3:a:asio:asio:{version}:*:*:*:*:*:*:*

Where {version} represents the current release to be published on their database.

Question: Would it be possible to submit Asio to the NIST database?

The details to contact NIST are found here: https://nvd.nist.gov/products/cpe Basically just need to send them an email the XML populated with the Asio details.

Many thanks.