3 ms·
Many CVEs in the Rust ecosystem aren’t filed by the Rust project itself. Anyone can file a CVE, it does not require involvement of upstream. That said things t
by steveklabnik 4y ago
Many CVEs in the Rust ecosystem aren’t filed by the Rust project itself. Anyone can file a CVE, it does not require involvement of upstream.
That said things that happen in the language or standard libraries like the one you linked, are often (but not always!) filed by the project.