This high number of security issues is due to the sponsoring of a bug bounty program funded by the European Commission, during the FOSSA program.
by EU-FOSSA who will pay up to €60,000 in bounties for reported VLC