No CVEs recorded for “orca_management_organization”.

Vendor keys are normalized slugs — red_hat becomes redhat. The catalog may also still be syncing.