* adding cve finding and adding release-notes to PR template
Signed-off-by: James Strong <strong.james.e@gmail.com>
* update cve report with verbiage around open CVEs and not disclosures
Signed-off-by: James Strong <strong.james.e@gmail.com>
* fix then assignees
Signed-off-by: James Strong <strong.james.e@gmail.com>
Signed-off-by: James Strong <strong.james.e@gmail.com>