5 reasons to strive for better disclosure processes
blog.trailofbits.com | blog | #open-source | #github | #rust | #cve | #case-study | #vulnerability-disclosure | #cvd | #security-policy | #trail-of-bits | #dos | #github-private-reporting
Summary
Trail of Bits shares five vulnerabilities in borsh-rs, Ethereum ABI parsers, Expo, num-bigint, and react-native-mmkv, showing how weak disclosure delays fixes; recommends GitHub private reporting.
- Published
- Collected
--- id: 1507 title: "5 reasons to strive for better disclosure processes" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2024/04/15/5-reasons-to-strive-for-better-disclosure-processes/" published_at: "2024-04-15 13:00" tags: ["open-source", "github", "rust", "cve", "case-study", "vulnerability-disclosure", "cvd", "security-policy", "trail-of-bits", "dos", "github-private-reporting"] phying_url: "https://phying.com/item/1507" lang: en --- # 5 reasons to strive for better disclosure processes ## Summary Trail of Bits shares five vulnerabilities in borsh-rs, Ethereum ABI parsers, Expo, num-bigint, and react-native-mmkv, showing how weak disclosure delays fixes; recommends GitHub private reporting. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2024-04-15 13:00 - **Original:** https://blog.trailofbits.com/2024/04/15/5-reasons-to-strive-for-better-disclosure-processes/ - **Phying News:** https://phying.com/item/1507