I'm not sure how we are going to improve the response speed but I don't think it is going to be acceptable that a 9.2/10 CVE was discovered in August and not patched until Oct 21 in the era of AI agents.
On the other hand we can't be patching things every day nor can maintainers be expected to be releasing all the time (especially because most are underfunded!)
Going to be a crazy few months going forward as I'm guessing there will be more of these types of events, not less.
commit 1aaef45