hey guys I have a question about dependecytrack export of VEX and VDR.
i recently exported a vex and then a vdr from the same project,
I noticed that some vulnerabilities were in the vdr but not in vex and I wonder why as I did not set any vulnerability as not affected or any other status so shouldn't all vulnerability be showed on both files or do I miss something in the difference between vex and vdr