fmajid a year ago

The punchline says it all: “Many bug bounty reports never assign CVE-IDs, leading to a false perception of security and software quality.”