CVE
Also called CVSS, vulnerability id
A public id for one known security flaw, such as CVE-2025-54136, so everyone can talk about the same bug. Its severity is usually given as a CVSS score from 0 to 10.
A score tells you how bad a flaw is in general. It doesn't know your app. A 9.8 in code you never call matters less than a 6.1 on your login page, so ask whether it's reachable before you ask about the number.
Say it to your agent
“This CVE is rated 9.8. Before you upgrade anything, show me whether our code reaches the vulnerable function, with the call path, and what an attacker would need. Then give me your own view of the priority.”