https://www.securityprivacyrisk.com/nsa-discloses-91-of-found-bugs-but-doesnt-say-when-it-discloses-them/
NSA discloses 91% of found bugs but doesn't say when it discloses them