2 ms·
> There are many wannabe security researchers who find issues that are definitely not exploitable, and then demand CVE numbers and other forms of recognition or
by nubinetwork 2y ago
> There are many wannabe security researchers who find issues that are definitely not exploitable, and then demand CVE numbers and other forms of recognition or even a bounty
I believe this has happened to curl several times recently.
- School-Cotton 2y agoIt happens constantly to any startup with a security@ email address.