News for hackers. Stuff that matters.

A comment on PSA: Libxslt is unmaintained and has 4 unpatched security bugs. Parent comment

Re:PSA: Libxslt is unmaintained and has 4 unpatched security... by baq on Friday August 29, 2025 @11:15AM (#45065237)
I'm just saying they've got a bug bounty program but not a bug prevention bounty program, or even a fix a known bug bounty program. The security team has a budget for the realized risks but predictably not for managing unrealized risk in the open source community which they depend on.
[ Parent | on HN ]
Re:PSA: Libxslt is unmaintained and has 4 unpatched security... by x0x0 on Friday August 29, 2025 @12:34PM (#45066251)
> a bug prevention bounty program

Particularly for a dep they've chosen to ship in their browser.

[ Parent | on HN ]