We do publish vulnerabilities, but only when the upstream community fixes it within a reasonable timeframe. It’s called responsible disclosure.
j previous speech k next speech