In some CVE, we can read some CPE like :
cpe:/a:libcap:libcap:2.00
cpe:/a:gnome:libsoup:2.32.2
cpe:/a:libgtop:libgtop:2.14.5
But neither libcap nor libsoup nor libgtop are in the official CPE dictionary !!
(XML file or online search : https://nvd.nist.gov/cpe.cfm)
How can it be possible ?
Thank you, Florent