...
The ONAP security work is split into two parts. The management of identified vulnerabilities, which is handled by the vulnerability management sub-committee and the coordination and identification of necessary security related activities which is handled by the security sub-committee.
Vulnerability management
...
Vulnerability management covers how to handle the reception of an identified vulnerability through to solution and communication of the vulnerability. The process is initiated by the reception of an email to security@lists.onap.org. The vulnerability management procedures can be found here: ONAP Vulnerability Management.
The vulnerability management procedures are executed on by the vulnerability management sub-committee.
Release Vulnerabilities
This list the vulnerabilities reported for each Release.
ONAP security sub-committee
...