Issues

• Proposed Governance changes for and elected Steering Chairs

  ossf/wg-vulnerability-disclosures#193 · Filter by author TracyRagan opened on Oct 1, 2026

• sdfdsf

  ossf/wg-vulnerability-disclosures#192 · Filter by author atoznews19 opened on Sep 26, 2026

• Proposal: concentration-weighted dependency metric (conemass) as a complement to Criticality Score

  ossf/wg-vulnerability-disclosures#191 · Filter by author node0000 opened on Sep 9, 2026

• Blog Proposal: Working Better Together: Coordinated Vulnerability Disclosure and the Academic Security Research Community

  ossf/wg-vulnerability-disclosures#190 · Filter by author jdemblin opened on Sep 8, 2026

• Proposal: Cross-industry working group & summit on vulnerability disclosure breakdown

  ossf/wg-vulnerability-disclosures#189 · Filter by author sevansdell opened on Sep 3, 2026
  8

• Cleanup / Improve the GH Pages process

  ossf/wg-vulnerability-disclosures#188 · Filter by author NicoleSchwartz opened on Jun 24, 2026
  1

• Make GitHub Pages out of our docs

  ossf/wg-vulnerability-disclosures#187 · Filter by author NicoleSchwartz opened on Jun 24, 2026
  2

• golang OSV database and incorrect dates

  ossf/wg-vulnerability-disclosures#186 · Filter by author adulau opened on May 22, 2026
  1

• Proposal: Accept Ortelius as a Sandbox Project

  helpwantedmeetingVOTE
  ossf/wg-vulnerability-disclosures#185 · Filter by author TracyRagan opened on May 21, 2026
  12

• Discuss best current practice for security teams - it needs to be updated

  ossf/wg-vulnerability-disclosures#184 · Filter by author oej opened on Mar 4, 2026
  1

• Blog Post for Q2 Vulnerability Coordination – Community Involvement on AI-Slop

  ossf/wg-vulnerability-disclosures#182 · Filter by author taladrane opened on Feb 4, 2026

• AI Contribution/Disclosure Policy Template(s)

  ossf/wg-vulnerability-disclosures#180 · Filter by author taladrane opened on Feb 4, 2026
  1

• Document existing practices for responding to AI-Slop

  ossf/wg-vulnerability-disclosures#179 · Filter by author taladrane opened on Feb 4, 2026
  9

• AI-SLOP: Develop best current practises for Open Source maintainers

  ossf/wg-vulnerability-disclosures#178 · Filter by author oej opened on Feb 4, 2026
  35

• Now that PURL is in the CVE Schema, how do we make it work in practice?

  ossf/wg-vulnerability-disclosures#177 · Filter by author Tomalrich opened on Jan 11, 2026

• CVEs for cloud and SAAS services

  ossf/wg-vulnerability-disclosures#176 · Filter by author oej opened on Jan 7, 2026
  19

• Improving Maintainer Contact Information for Vulnerability Disclosure

  helpwanted
  ossf/wg-vulnerability-disclosures#175 · Filter by author taladrane opened on Jan 7, 2026
  2

• Discuss OSS VulnDB to support upstream projects and maintainers effectively share vulnerability metadata with the broader ecosystem

  helpwantedmeeting
  Feature

  ossf/wg-vulnerability-disclosures#174 · Filter by author SecurityCRob opened on Nov 25, 2025
  3

  

• Proposal to develop a NIST Product Vulnerability Disclosure Report (VDR) format standard aligned with FedRAMP VDR standards

  helpwanted
  ossf/wg-vulnerability-disclosures#172 · Filter by author rjb4standards opened on Sep 15, 2025
  59

• CNA/CVE guidance for unreleased code and related issues

  ossf/wg-vulnerability-disclosures#171 · Filter by author ctcpip opened on Sep 3, 2025
  4

• Get the WG resources into a public website (GitHub Pages)

  ossf/wg-vulnerability-disclosures#170 · Filter by author JLLeitschuh opened on Aug 20, 2025
  4

• Discussion: Guidance on external security contributors and handling vuls publicly

  helpwanted
  ossf/wg-vulnerability-disclosures#167 · Filter by author taladrane opened on Jul 23, 2025
  2

• Review Security Baseline controls and provide feedback

  ossf/wg-vulnerability-disclosures#165 · Filter by author taladrane opened on May 13, 2025
  

• Project Idea: OSV as the solution for the Global Vulnerability Database (for open source) and mitigation for the CVE ecosystem existential risk

  ossf/wg-vulnerability-disclosures#164 · Filter by author andrewpollock opened on May 7, 2025
  9

• CVE risk, threats and safety net

  ossf/wg-vulnerability-disclosures#163 · Filter by author oej opened on Apr 30, 2025
  4