Vulnerabilities nandsec has identified and reported.
Each advisory is published once the vendor ships a fix, or when the disclosure period ends (90 days from the report unless extended). The disclosure policy sets out the process. Bugs, patches and contributions are on the Research page.
No advisories published yet.
The same fields vendors publish, so you can check your own systems against them.