Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Seriously!

We also suffer from this. Although in some cases it's due to a Dev dependency. It's crazy how much noise it adds specifically from ReDoS...



ReDoS cves in your dev dependencies like playwright that could literally never be exploited, so annoying.


Totally hear you on the noise…but we should want to auto-merge vs ignore, no? Given the right tooling of course.


We could just skip some steps and I could send you a zip file of malware for you to install on your infra directly if you’d like.


No




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: