Post #4361587
2026-08-03 08:27 UTC
@gnyman@infosec.exchange it could have been faster but it seems reasonable given how narrow the issue is and how complex the deeper fix was (not just upgrading a dep but adding new approval flows for certain behaviors, which take a while to fully test across platforms)
you also have to consider that every library is being bombarded with exotic, esoteric, and often poorly verified AI-generated vulnerability reports right now — as a small team it makes prioritizing your time difficult
Replies (1)
-
@gnyman@infosec.exchange 2026-08-03 18:21
@kepano@mastodon.social is this (one of) the new prompts? I don't understand what I'm being asked to do, and I consider myself fairly technical. I got it when running the web clipper.