undefined | Better HN

0 pointsfulafel3y ago0 comments

Lack of an assigned CVE is a really bad reason to discount anything, it's a bureucratic process with various tangential limitations, rules and delays.

0 comments

krzyk3y ago

CVEs are frequently created for minor issues, like the recent Jackson bug that has very specific (and not frequent) case.

1 more reply

j / k navigate · click thread line to collapse

0 pointsfulafel3y ago0 comments

Lack of an assigned CVE is a really bad reason to discount anything, it's a bureucratic process with various tangential limitations, rules and delays.

0 comments

krzyk3y ago

CVEs are frequently created for minor issues, like the recent Jackson bug that has very specific (and not frequent) case.

1 more reply

j / k navigate · click thread line to collapse