Comment by jonas21

Note that HIGH severity isn't the highest severity (that's CRITICAL) [1].

The last high severity fix in OpenSSL was this past December.

[1] https://www.openssl.org/policies/secpolicy.html