Security Team and advisories · Question 9 of 12

How does the Security Team proceed when a vulnerability in an extension is reported and the author does not provide a fix?

1 answer is correct. Medium

1. A The extension is taken over into the Core
2. B All affected versions are removed from the TER and a security bulletin recommends uninstalling
3. C The extension remains unchanged because the team is only responsible for the Core
4. D The Security Team writes the fix itself and publishes it under its own name