Your platform team ships an internal package. Half the org pulls it. Someone finds a bug that in the wrong hands is a full RCE.

Source: [Dev.to](https://dev.to/leobaniak/innersource-security-advisories-go-ga-a-private-channel-for-private-vulns-og8)

Sponsored