The CSAF file is always connected with one particular advisory as well as a provided advisory may perhaps include things like a number of solution version(s) and a number of components, according to the merchandise type https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812