1 rich Libsyn https://www.libsyn.com 90 600 Josh welcomes back Daniel Thompson to explain what just happened regarding vulnerability reporting and the CRA on September 11. The very first CRA requirements kicked in, but what does it really mean? Daniel explains it's not too bad. There are plenty more requirements coming, but this one feels very approachable. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-09-daniel-cra &amp;nbsp; &amp;nbsp; Open Source Security https://opensourcesecurity.io/ <iframe title="Libsyn Player" style="border: none" src="//html5-player.libsyn.com/embed/episode/id/42852860/height/90/theme/custom/thumbnail/yes/direction/forward/render-playlist/no/custom-color/6e6a6a/" height="90" width="600" scrolling="no" allowfullscreen webkitallowfullscreen mozallowfullscreen oallowfullscreen msallowfullscreen></iframe> https://assets.libsyn.com/secure/content/206157090