Compliance wiki
Search the reference notes of the security and controls team.
heartbleed
CVE-2014-0160 — a critical bug in the OpenSSL heartbeat extension. Leaked up to 64 KB of server memory per request, exposing private keys, passwords, and session tokens.