For OpenSSL, I'm not sure. This highlights something I was going to mention, though. I wish each project would stop coming up with its own scale and just use,

For OpenSSL, I'm not sure. This highlights something I was going to mention, though. I wish each project would stop coming up with its own scale and just use, for example, CVE scores or some other "standard" by which all these vulnerabilities can be compared.