diff --git a/package/taglib/taglib.mk b/package/taglib/taglib.mk
index 738be35756..f31f1046a5 100644
--- a/package/taglib/taglib.mk
+++ b/package/taglib/taglib.mk
@@ -9,6 +9,7 @@ TAGLIB_SITE = http://taglib.github.io/releases
 TAGLIB_INSTALL_STAGING = YES
 TAGLIB_LICENSE = LGPL-2.1 or MPL-1.1
 TAGLIB_LICENSE_FILES = COPYING.LGPL COPYING.MPL
+TAGLIB_CPE_ID_VENDOR = taglib
 
 # 0002-Don-t-assume-TDRC-is-an-instance-of-TextIdentificationFrame.patch
 TAGLIB_IGNORE_CVES += CVE-2017-12678