Docker is now officially a CNA under MITRE, which means you should get better notifications and documentation when we publish a vulnerability.