Consider CVS score in Updates checks

SuSE can report the CVE number in the output of zypper which can be asked to query the CVS score.

We would have to look how that can be achieved on other distributions.

Do you have code that you can share?