We are at 9 days to the next #curl release and we have only *three* pending CVEs to announce (two low, one medium).
Three is like nothing!
(Mythos says it can't find any more. Zeropath finds no vulnerabilities. Codex security shows an empty list.)
6
Replies
1
Boost
@bagder my friends rave about the Japanese Sakana Fugu model and its ability to find flaws others don’t:
@bagder Any C mistakes in there?
@0xThiebaut one of these three is considered a C mistake (use after free)
I'm under no illusion that the last vulnerability has been found. It just might be that the easy ones are picked now.
