Re:About KeePassXC's Code Quality Control
by AlexErrant on Sunday November 09, 2025 @03:25PM
(#45868845)
The original Keepass project has 11 CVEs. XC has 3, and has disputed all of them with e.g. "the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs", etc.
[ Parent
| on HN ]
Re:About KeePassXC's Code Quality Control
by droidmonkey on Sunday November 09, 2025 @04:07PM
(#45869186)
Additionally, the original KeePass project has no public development or public review process for their code. They do everything behind the scenes and only publish code when a release is made. KeePass is "code available" open source.