4 ms·
CVEs are terrible nowadays. Any enterprising ”security researcher” can file one against your project, and the CVE aggregators will flat refuse to take it down.
by nikanj 3y ago
CVEs are terrible nowadays. Any enterprising ”security researcher” can file one against your project, and the CVE aggregators will flat refuse to take it down. See for example CVE-2023-29827 or CVE-2023-35116
- happymellon 3y agoUnfortunately that doesn't prevent "security" from putting checks in the build pipelines.