Red Hat Introduces Project Hummingbird focused on Cloud-Native Dev & "Zero-CVE"

Is shipping with zero CVEs a marketing gimmick or was Red Hat knowingly shipping vulnerable software prior to this?