News for hackers. Stuff that matters.

A comment on Guava: Google core libraries for Java. Parent comment

Re:Guava: Google core libraries for Java by nikanj on Wednesday November 08, 2023 @04:00PM (#38196926)
CVEs are terrible nowadays. Any enterprising ”security researcher” can file one against your project, and the CVE aggregators will flat refuse to take it down. See for example CVE-2023-29827 or CVE-2023-35116
[ Parent | on HN ]
Re:Guava: Google core libraries for Java by happymellon on Thursday November 09, 2023 @12:25AM (#38201497)
Unfortunately that doesn't prevent "security" from putting checks in the build pipelines.
[ Parent | on HN ]