congrats to the democrats for solving software security by making CVEs in supplied software illegal 🙃
read image description
ALT
6
8
99
Conversation
Replying to
The unreasonable part is that CVEs can be assigned for subjective things requiring deciding whether it matters. They say known vulnerabilities in those databases need to be fixed and it seems reasonable to require knowing which projects you ship and shipping the patches for them.