The port currently defines CPE_VENDOR twice CPE_VENDOR= gnome CPE_VENDOR= gnome_display_manager I believe the second CPE_VENDOR was supposed to be CPE_PRODUCT. Patch and more details on Phabricator: https://reviews.freebsd.org/D18801
A commit references this bug: Author: tobik Date: Wed Jan 23 10:29:54 UTC 2019 New revision: 491030 URL: https://svnweb.freebsd.org/changeset/ports/491030 Log: x11/gdm: Correct CPE (do not set CPE_VENDOR twice) There are no CPE that match cpe:2.3:a:gnome_display_manager:gdm:*:*:*:*:*:* Correct it to cpe:2.3:a:gnome:gnome_display_manager:*:*:*:*:*:*:*:* PR: 234851 Approved by: gnome (maintainer timeout, 2 weeks) Differential Revision: https://reviews.freebsd.org/D18801 Changes: head/x11/gdm/Makefile