>No wonder it was given a "ZDI-CAN" number (whatever that is) instead of an actual CVE. ZDI = Zero Day Initiative. https://www.zerodayinitiative.com/advisorie

>No wonder it was given a "ZDI-CAN" number (whatever that is) instead of an actual CVE. ZDI = Zero Day Initiative. https://www.zerodayinitiative.com/advisories/published/ https://www.zerodayinitiative.com/advisories/published/ I don't particularily agree with some of their philosophy, but they are smart folks and valuable to monitor alongside CVE. It's not like it's some backalley discount version of CVE. They've been around for 20 years, after all.