Using the Vulnerability Index
Our public list of the vulnerabilities we have found, and what the labels mean.
The Vulnerability Index lists vulnerabilities NebuSec has found and confirmed in open-source and commercial software.
- Fixed: the fix has been merged into the project’s main code.
- Fixing: a fix has been submitted and is under review.
- Backlog: no fix submitted yet, or lower priority.
The score runs from 0 to 10. Higher means more severe, and 9 or above is critical.