For OpenSSL, I&#x27;m not sure.  This highlights something I was going to mention, though.  I wish each project would stop coming up with its own scale and just use, for example, CVE scores or some other &quot;standard&quot; by which all these vulnerabilities can be compared.