I am setting up auto-vuln scanning, maybe useful to prevent such cases and get notified about such issues with gitea e.g.. But also defense in depth helps too.