Noticed this in passing while reviewing another change. We sometimes use this old format for security vulnerabilities that we can't issue CVEs for, such as SS-2023-001
Not sure why this was ever changed to mark them as "other" changes, but we definitely do treat these the same as we do with security issues we can assign CVEs to.
Noticed this in passing while reviewing another change. We sometimes use this old format for security vulnerabilities that we can't issue CVEs for, such as SS-2023-001
Not sure why this was ever changed to mark them as "other" changes, but we definitely do treat these the same as we do with security issues we can assign CVEs to.
Issue