How to handle vulnerabilities in your open source project.

Read more at the source