diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 0.3.0.2
+
+* Update `cvss` dependency bounds
+
 ## 0.3.0.0
 
 * Add `Repository` and `ComponentIdentifier` in `Security.Advisories.Core.Advisory`
diff --git a/README.md b/README.md
--- a/README.md
+++ b/README.md
@@ -11,5 +11,5 @@
 Run (and auto update) the golden test:
 
 ```ShellSession
-cabal test -O0 --test-show-details=direct --test-option=--accept
+cabal test -O0 --test-show-details=direct
 ```
diff --git a/hsec-core.cabal b/hsec-core.cabal
--- a/hsec-core.cabal
+++ b/hsec-core.cabal
@@ -1,6 +1,6 @@
 cabal-version:      2.4
 name:               hsec-core
-version:            0.3.0.0
+version:            0.3.0.1
 
 -- A short (one-line) description of the package.
 synopsis:           Core package representing Haskell advisories
@@ -32,7 +32,7 @@
   build-depends:
     , base          >=4.14    && <5
     , Cabal-syntax  >=3.8.1.0 && <3.15
-    , cvss          >=0.2     && <0.3
+    , cvss          >=0.2     && <0.4
     , network-uri   >=2.6.3.0 && <2.8
     , osv           >=0.1     && <0.3
     , pandoc-types  >=1.22    && <2
diff --git a/src/Security/Advisories/Core/Advisory.hs b/src/Security/Advisories/Core/Advisory.hs
--- a/src/Security/Advisories/Core/Advisory.hs
+++ b/src/Security/Advisories/Core/Advisory.hs
@@ -82,7 +82,7 @@
 
 -- Keep this list in sync with the 'ghcComponentFromText' below
 data GHCComponent = GHCCompiler | GHCi | GHCRTS | GHCPkg | RunGHC | IServ | HP2PS | HPC | HSC2HS | Haddock
-  deriving stock (Show, Eq, Enum, Bounded)
+  deriving stock (Show, Eq, Ord, Enum, Bounded)
 
 ghcComponentToText :: GHCComponent -> Text
 ghcComponentToText c = case c of