After filing https://bugs.debian.org/932500 I realized it would be great to have some automation in place to automatically pull vulnerabilities from https://snyk.io and turn them into CVE bugs in BTS. Thoughts ? Paolo