| Post Reply | RetroFed Forums Forum Index
» linuxmemes
Page 2 of 2 Goto page « First Previous 1, 2 |
| Author | Message | ||
|---|---|---|---|
|
jj4211
lemmy.world
jj4211@lemmy.world Joined: 2023-06-16 |
142 critical vulnerabilities checks inside denial of service only
Probably not even that. For example: The short of it is they declared the name of a function to be a vulnerability, because some developers were confused by the name and used it when they shouldn't. A fine critique of things, but the CVE is considered closed by merely renaming the function, and downstream misuses were considered separate issues. A "vulnerability" fixed by:
|
||
| 9 | |||
pticrix
lemmy.ca
pticrix@lemmy.caJoined: 2024-07-06 |
Alright alright, you guys are friends now, by the official unofficial internet rules of random interaction, you may kiss now
God dammit. This
|
||
| 2 | |||
|
Feathercrown
lemmy.world
Feathercrown@lemmy.world Joined: 2023-07-06 |
Probably not even that. For example: https://nvd.nist.gov/vuln/detail/cve-2026-43073 The short of it is they declared the name of a function to be a vulnerability, because some developers were confused by the name and used it when they shouldn't. A fine critique of things, but the CVE is considered closed by merely renaming the function, and downstream misuses were considered separate issues. A...
lmao that's crazy I usually encounter it in NPM packages, it's always like "200 critical vulns in your dependencies!" and then 199 of them are "if you pass a regex bomb it takes a long time lol" |
||
| 6 | |||
| Post Reply |
Page 2 of 2
Goto page
« First
Previous
1, 2
Back to top |