Read more about
Severity Levels for Security Issues
Security bug fix policy