...
When a critical severity security vulnerability is found, we will send a copy of all critical security advisories to the technical contact(s) listed for current evaluators and customers of the impacted app version(s) and to those subscribed to the 'Alerts, Advisories, & Policy Updates' mailing list. Subscribe at https://55degrees.se/subscribe.
When a non-critical severity security vulnerability is found, we will mention the fix in our release notes just as we do for other bugs.
...