Our paper entitled Between Risk, Recognition, and Necessity: How Open-Source Project Maintainers Perceive and Navigate CVEs Through Reporting and Resolving Vulnerabilities has been accepted to the 33rd ACM SIGSAC Conference on Computer and Communications Security (CCS 2026). Congratulations to Jessy and Steven!