Episode 392 - Curl and the calamity of CVE

<p dir="auto"><a href="https://infosec.exchange/@joshbressers" rel= "nofollow">Josh</a> and <a href= "https://infosec.exchange/@kurtseifried" rel="nofollow">Kurt</a> talk about why CVE is making the news lately. Things are not well in the CVE program, and it's not looking like anything will get fixed anytime soon. Josh and Kurt have a unique set of knowledge around CVE. There's a lot of confusion and difficulty in understanding how CVE works.</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href= "https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/" rel= "nofollow">Curl blog post</a></li> <li><a href= "https://opensourcewatch.beehiiv.com/p/now-postgresqls-turn-bogus-cve" rel="nofollow">Now it's PostgreSQL's turn to have a bogus CVE</a></li> <li><a href="https://github.com/github/advisory-database">GitHub Advisory Database</a></li> <li><a href= "https://infosec.exchange/@joshbressers/110968734125211326" rel= "nofollow">Josh's "CVE tried to get me fired" story</a></li> </ul>