News for hackers. Stuff that matters.

A comment on CVE-2022-23529 – node-jsonwebtoken.

Re:CVE-2022-23529 – node-jsonwebtoken by zacharyvoase on Tuesday January 10, 2023 @06:17PM (#34332865)
If this is a CVE, then arguably any method invocation on any function argument in any JavaScript library is a CVE, and we might as well throw the whole thing away. Is there a way to challenge this as not-a-CVE?
[ Parent | on HN ]
Re:CVE-2022-23529 – node-jsonwebtoken by michaelermer on Tuesday January 10, 2023 @07:20PM (#34333402)
I am trying this on GitHub https://github.com/github/advisory-database/pull/1595
[ Parent | on HN ]