Cases · What was exposed: source code · Added to the register (date we first published it): last 30 days · Root cause: a safeguard that was in place did not hold