New funding model for Open Source just dropped.InfoSec starts screaming about a 9.9 CVSS and then the open source maintainer sells the vuln on the dark web.