Choose how you want to continue.
a CVE dispute
Summary
The blog post discusses the curl project's role as a CVE Numbering Authority (CNA), allowing it to manage its own CVE identifiers. The author reflects on the impact of this responsibility, particularly in relation to the legitimacy of CVEs associated with their software.
MORE POSTS LIKE THIS
Why you should use Fromager to build your Python dependency trees from source
Red Hat ·
Jun 25, 2026
How my minimal, memory-safe Go rsync steers clear of vulnerabilities
stapelberg ·
May 24, 2026
AUTHOR