So far, we’ve found and validated more than 500 high-severity vulnerabilities. We’ve begun reporting them and are seeing our initial patches land, and we’re continuing to work with maintainers to patch the others.

If this is true, perhaps a list will be provided soon so communities can vet the effort for themselves.