Findings
Every vulnerability we've reported to an open-source project. While a finding is in coordinated disclosure we show only the project and the date; the details follow once it's fixed, or 90 days after we reported it.
Our first reports are on their way to maintainers. They'll show up here.