We need a command to send the announcement to the cve-announce list.
We also need an option (or separate command) to send the announcement to the oss-security list, and to the current maintainer(s).
For modules with no released fixes, I have posted to the RT queue. We may want to look into something that can automate that.