I understand needing to embargo for some period, but leaving it this long is because they just won't fix the vulns. Some are probably on purpose.