Very exciting news - Microsoft is now publishing automation-friendly security advisories in CSAF format. CSAF allows for more detail and different groupings that just CVEs, and allows orgs to share advisories on security issues that do not have CVEs.