Currently have three open Security Vulnerability reports open with two fediverse projects, but unfortunately I'm busy on paid client work so can't devote the time to the PRs to fix.
Would love to find a sponsor so I can devote the 2-3 hours to fixing each.
Two have high CVE scores, and one is moderate/medium.