3 ms·
Someone should reestimate severity of those "CVEs". I got 10 warnings and none of them is any severe for my app(and yours too, likely), so I'm definitely not vu
by homakov 11y ago
Someone should reestimate severity of those "CVEs". I got 10 warnings and none of them is any severe for my app(and yours too, likely), so I'm definitely not vulnerable.
Also LOL "CSRF Vulnerability in jquery-rails" is known as not a bug at all.
- phillmv 11y agoWouldn't be the first time you sent us a PR, Egor :D. But yeah, we do need to find the time to clean it up.
- homakov 11y agoJust don't want it to be yet another "We found 123 vulnerabilities, sign up to learn more". E.g. if it's Rails RCE it confidence should be 3/3, if some app-specific, 2/3 etc. But anyway great job