At 6 pending #curl vulnerability reports to assess. 9 already confirmed. My goal is to reach hackerone inbox zero this week...
6
Replies
0
Boosts
Aisle reported 9 out of 12 confirmed vulns.
@bagder do you have any sense of a trend in the severity and/or complexity of the exploits at this point?
@jon_ellis almost all vulnerabilities these days are at really low severity and usually require special circumstances or setups
@bagder that is excellent to hear... the curl codebase is probably ahead of the curve. still, it's good to hear that it's not all apocalypse out there and progress is possible
*then* write up security advisories and make sure all the confirmed ones have fixes.
Now at 2 pending, 12 confirmed...