security

Six Minutes Stale: A Security Story That Was Right When It Was Written

A path-traversal write-up said no patch existed. Six minutes later the release shipped, and twenty-two seconds after that a 9.9 CVE went live.