Search results

New proposal under consideration within OpenSSF

Status: Open.

#28 In orcwg/vulnerability-management-spec;

· rjb4standards opened on Sep 22, 2025

CRA compliance: notification of exploited vulnerabilities and incidents

Status: Open.

#25 In orcwg/vulnerability-management-spec;

· mrybczyn opened on Apr 22, 2025

CRA compliance: definition of the timeline for fixes

Status: Open.

#24 In orcwg/vulnerability-management-spec;

· mrybczyn opened on Apr 22, 2025

CRA compliance: delivery of fixes

Status: Open.

#23 In orcwg/vulnerability-management-spec;

· mrybczyn opened on Apr 22, 2025

CRA compliance: lifecycle management

Status: Open.

#22 In orcwg/vulnerability-management-spec;

· mrybczyn opened on Apr 22, 2025

Feedback on first read

Status: Open.

#18 In orcwg/vulnerability-management-spec;

· maertsen opened on Apr 8, 2025

Is estimation of criticality possible without known use cases?

Status: Open.

#17 In orcwg/vulnerability-management-spec;

· tobie opened on Apr 1, 2025

Why use the term researcher instead of reporter?

Status: Open.

#15 In orcwg/vulnerability-management-spec;

· tobie opened on Apr 1, 2025

What is the scope of the spec?

Status: Open.

#13 In orcwg/vulnerability-management-spec;

· tobie opened on Mar 31, 2025

Is it vulnerability handling or management?

Status: Open.

#12 In orcwg/vulnerability-management-spec;

· tobie opened on Mar 31, 2025

Disallowing reporting without creating a dedicated account is impractical for small project

Status: Open.

#10 In orcwg/vulnerability-management-spec;

· bukka opened on Mar 28, 2025

distinguish different kinds of vulnerability flows more explicitly

Status: Open.

#9 In orcwg/vulnerability-management-spec;

· raboof opened on Mar 26, 2025