Conversation

Notices

1. Daniel Stenberg (bagder@mastodon.social)'s status on Thursday, 01-Jun-2023 00:05:49 UTC Daniel Stenberg

   CVE-2023-27536

   Announced by the #curl project back in March 2023. We deem it severity Low. https://curl.se/docs/CVE-2023-27536.html

   NVD, in their infinite wisdom, thinks this is a CRITICAL 9.8 flaw: https://nvd.nist.gov/vuln/detail/CVE-2023-27536

   I wish I knew how to fix this annoying problem but talking or whining to NVD certainly does not seem to help.

   • Daniel Stenberg (bagder@mastodon.social)'s status on Thursday, 01-Jun-2023 00:05:49 UTC Daniel Stenberg

     in reply to

     After my complaint the NVD hos "downgraded" it to a 7.5 (high).

     My response: you are scaremongering. It is not a high either.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.