It's publicly available. Look through the bug reports, its easy to find. So many goes unattended for a very long time. Often it takes a long time for someone to get assigned. Then often NOTHING happens. No answers, nothing - often for years.
I'll file this thread under my FUD section if you can't bother to give a single example of a security issue being ignored for years.