Jun 22, 2025, 12:25 PM@cure53 @jwildeboer @morre which also is done for lots of reports that end up not a security problem at all, thus not giving anyone any money...
- Jun 22, 2025, 12:25 PM
Replies
Cure53🔓cure53@infosec.exchangeJun 23, 2025, 10:41 AM@bagder True, we are lucky with our - in that regard - niche software because either the JavaScript alert pops or it doesn't, and if it doesn't, well - likely no bug.
But in other projects, that phase certainly demands for way more time than the actual fix/patch itself.
Likely complicated to address without aforementioned committee or any other competent entity accompanying the whole triaging process.