Using the Vulnerability Index

Our public list of the vulnerabilities we have found, and what the labels mean.

Updated

The Vulnerability Index lists vulnerabilities NebuSec has found and confirmed in open-source and commercial software.

  • Fixed: the fix has been merged into the project’s main code.
  • Fixing: a fix has been submitted and is under review.
  • Backlog: no fix submitted yet, or lower priority.

The score runs from 0 to 10. Higher means more severe, and 9 or above is critical.