...
- Create ticket with issue description in Vulnerability Reporting Jira Project (VMS members)
- Make the ticket publicly visible (VMS members)
- Assign the bug to one of VMS members
- Perform bug triage and CVE request if necessary (VMS coordinator)
- Send email containing triage results to /Agree on email recipients/ONAP TSC Chair and LFN representative
- Rest of standard process should be followed, skipping embargoed disclosure step
...
- Make the related ticket publicly visible
- If a patch has been already proposed push it immediately to gerrit
- Skip embargoed disclosure.
- Send email confirming that issue has been leaked to /Agree on email recipients/ONAP TSC Chair and LFN representative
- Rest of standard process should be followed and finished as soon as possible.
...