The one the OpenSSL follows is documented here[0]. There's also the CVSS[1] which covers a broader scope. [0]: https://www.openssl.org/policies/secpolicy.html

The one the OpenSSL follows is documented here[0]. There's also the CVSS[1] which covers a broader scope. [0]: https://www.openssl.org/policies/secpolicy.html https://www.openssl.org/policies/secpolicy.html [1]: https://en.wikipedia.org/wiki/CVSS https://en.wikipedia.org/wiki/CVSS