Perfect day for learning how to work with responsible disclosures, how Git platforms support them, how to define the relevant CWEs and how to judge the severity of the reported vulnerability. Saved me from hanging bling onto a dead plant. Learned much, and believe that every #ResearchSoftwareEngineer should get the opportunity to learn how to do these things. Ideally before they have to do them.




