Post navigationKnow, Prevent, Fix: A framework for shifting the discussion around vulnerabilities in open source