Triage a security vulnerability report
Open-source maintainer and external contributor: Triage a security vulnerability report. Starts when: Private report. Steps: Open report; Confirm; Fix privately; Coordinate disclosure; Publish advisory. Done when: The advisory shows fix version and disclosure date with a receipt. Rules that apply: ISO/IEC 29147 vulnerability disclosure.