3 ms·
What would motivate someone to do that? Sounds misleading to file a bunch of CVEs years after the fact.
by ljm 5y ago
What would motivate someone to do that? Sounds misleading to file a bunch of CVEs years after the fact.
- steveklabnik 5y agoThe idea is, a lot of tooling relies on the CVE system to determine if a system is vulnerable, and so making sure that there is an actual CVE filed for every security bug is a good idea for the robustness of said tooling. At least, that's my understanding.