Full report can be found here. Interesting note from the report:

Despite the vulnerabilities listed above, we believe that AMD SNP firmware meets a high security bar. Firmware design mitigates several bug classes, and offers a way to recover from vulnerabilities. RMP based access control is a solid integrity protection, and confidential VMs are protected against a broad range of attacks.