3 ms·

> Providing a real CVE is a contribution, not a burden. Isn't a real CVE (like any bug report) both a contribution and a burden?

• SR2Z 11mo ago
  Only if you subscribe to the "if we stop testing, the number of cases will drop!" philosophy.
• arcfour 11mo ago
  It's not fair to classify it as a burden; it existed anyways, but now you have the work/issue identified.