Jan-Peter Wiersma: “Many 😊 But my main finding was the release timing of CVE an…”

Jan-Peter Wiersma @jpwiersmaOct 223e57999

Just like heaps of other devs, I'm spending today to put a lot of new learnings into practice

Many 😊 But my main finding was the release timing of CVE and how we used to track it. These PHP CVEs were extra interesting because everything was coordinated to not leak and be able to distribute directly. We got to know about this is only a day or so before, had a coordinated release and the implementation and rollout was faster then the CVE communication through the normal channels like OSV. It led me to rethink CVE tracking and rollout..

10:53 · Oct 24, 2026commit bb69109

Younes @younes-io5d

interesting, i think people in the linux kernel also have similar challenges

Commit