Publicly known vulnerabilities fixed

[aschaeffer]

OpenSSF Best Practices Badge Program

Security

Publicly known vulnerabilities fixed

• There MUST be no unpatched vulnerabilities of medium or higher severity that have been publicly known for more than 60 days. [vulnerabilities_fixed_60_days]
• Projects SHOULD fix all critical vulnerabilities rapidly after they are reported. [vulnerabilities_critical_fixed]