Gathering technical details of unpatched vulns is dangerous, no matter who is doing it. The #EU Cyber Resilience Act should avoid making this a requirement, it will not make us safer.
More info in the blog post:
https://guardianproject.info/2023/06/11/eu-should-not-require-sharing-unpatched-vulnerabilities/