there was a security audit that explains parts of it: daniel.haxx.se/blog/2016/11/23…

yeah makes sense that would result in a solid spike. Really reassuring to see the amount of high critical vulns go down in the later years though! You're all doing great work

@geewee thank you, I too like that fact, but it also required this split in severity to show, because of the increase of low/medium ones lately

Just shows not all vulnerabilities are born equal!

@st3fan hm, let me see what I can do...

@st3fan the issue then becomes that the vulns are counted on report date. It mostly looks messy if I add 12 month average number of LOC changed per month