The concrete path from vulnerable to safe — usually an upgrade to a fixed version.
Remediation is what you actually do about a vulnerability: upgrade to the fixed version, apply a patch, or mitigate (disable the vulnerable path, add a control) when no fix exists yet. Knowing a CVE exists is trivia; knowing the exact safe version to move to is remediation.
Every vulnerability page on Gold lists affected and fixed versions plus step-by-step remediation guidance, and the Safeguard platform automates the fix — opening upgrade pull requests and validating them against your build.