CFD — Vulnerability Remediation Queue
Twelve fortnights of high and critical CVEs from scanner detection to verified closure, where every band widens and the remediation WIP limit of 120 is breached from the third fortnight onwards.
Make it your own.
title "Vulnerability management — high and critical findings"
unit findings
stages: Detected*, Triaged, In remediation, Awaiting change window*, Verified closed
commit Triaged
wip-limit "In remediation" 120
# Fortnightly export from the scanner and the change calendar.
2025-04-07 | 486, 412, 318, 244, 196
2025-04-21 | 742, 628, 492, 380, 308
2025-05-05 | 988, 836, 654, 502, 408
2025-05-19 | 1246, 1048, 818, 620, 502
2025-06-02 | 1512, 1268, 982, 738, 594
2025-06-16 | 1784, 1490, 1148, 852, 684
2025-06-30 | 2046, 1704, 1306, 962, 770
2025-07-14 | 2318, 1926, 1470, 1074, 856
2025-07-28 | 2584, 2142, 1628, 1182, 938
2025-08-11 | 2860, 2364, 1792, 1294, 1022
2025-08-25 | 3128, 2580, 1950, 1402, 1104
2025-09-08 | 3402, 2802, 2112, 1514, 1188