At 6 pending #curl vulnerability reports to assess. 9 already confirmed. My goal is to reach hackerone inbox zero this week...
0 Boosts
0 Likes
Aisle reported 9 out of 12 confirmed vulns.
I wonder why static analyzers didn't find these bugs…
@bagder Fascinating that they still manage to find more after looking at the code quite a few times already.
@bagder do you have any sense of a trend in the severity and/or complexity of the exploits at this point?
@jon_ellis almost all vulnerabilities these days are at really low severity and usually require special circumstances or setups
*then* write up security advisories and make sure all the confirmed ones have fixes.
Now at 2 pending, 12 confirmed...