What to do when you receive a vulnerability report: A step-by-step guide for maintainers

A step-by-step guide for open source maintainers on how to handle vulnerability reports confidently from the start.