That you do [1]. But I would be proud of that! Not many people write side projects important enough to (a) have someone use it enough to notice a problem and (b

That you do [1]. But I would be proud of that! Not many people write side projects important enough to (a) have someone use it enough to notice a problem and (b) have it be important enough that a CVE advisory is issued at all. I'm sure most people have written code with vulnerabilities over the years. I'm sure I have. Just most of it isn't worthy of being noticed :) [1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-4529 http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-4529