הצטרף ל-Nostr
2026-08-22 16:01:42 CEST

Will Dormann on Nostr: We all know that CVE references age over time, and eventually none of the references ...

We all know that CVE references age over time, and eventually none of the references exist anymore. (See also: people who run websites usually don't understand the concept of the World Wide Web)

Case in point:
The recent GitLab [CVE-2026-19478](https://www.cve.org/CVERecord?id=CVE-2026-19478 ) and [CVE-2026-19650](https://www.cve.org/CVERecord?id=CVE-2026-19650 )

Out of the three references, one of them simply [doesn't exist](https://gitlab.com/gitlab-org/gitlab/-/work_items/612617 ), and one of them is [hidden behind a login requirement](https://hackerone.com/reports/3926431 ), after which you're told that you cannot access it.

Why wait for references to age out over time when you can make them worthless right at publication time? 😂