• Rustmilian@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    8 months ago

    I know what curl CVE you’re referring too.
    Yeah, that was pretty stupid, they marked it high severity when 1 It was already patched like a year prior and 2 it was a complete non-issue in the first place.
    Then some fuckin AI put forth another bogus CVE based on the one you’re referring.
    The curl dev was pissed, and rightfully so.

    And You’re right, it’s more so the details of the CVEs that’s important then the actual CVEs themselves.