Post #1090636
2026-04-11 18:36 UTC
Brocards for vulnerability triage
https://blog.yossarian.net/2026/04/11/Brocards-for-vulnerability-triage
#security #oss
Replies (2)
-
@hugovk@mastodon.social 2026-04-12 14:01
@yossarian Where does "documented as unsafe" fall for things like https://docs.python.org/3/library/http.server.html and https://pillow.readthedocs.io/en/latest/reference/ImageMath.html#PIL.ImageMath.unsafe_eval ?
-
@matmair@mastodon.social 2026-04-12 16:45
@yossarian my personal opinion: VulDB should be shunt from the security world. A mail from them feels like a hostage negotiation.