macOS folk: This is your periodic reminder 🎗️ to:
```bash
$ brew update && brew upgrade && brew cleanup
```
I just got back 10.7 GB & patched a slew of CVEs.
```bash
$ brew update && brew upgrade && brew cleanup
```
I just got back 10.7 GB & patched a slew of CVEs.
December 16, 2024 at 1:55 AM
macOS folk: This is your periodic reminder 🎗️ to:
```bash
$ brew update && brew upgrade && brew cleanup
```
I just got back 10.7 GB & patched a slew of CVEs.
```bash
$ brew update && brew upgrade && brew cleanup
```
I just got back 10.7 GB & patched a slew of CVEs.
We've released fixes for 5 CVEs affecting the Svelte ecosystem. Please upgrade your apps!
Read the post to learn if you're affected:
svelte.dev/blog/cves-af...
Read the post to learn if you're affected:
svelte.dev/blog/cves-af...
CVEs affecting the Svelte ecosystem
Time to upgrade
svelte.dev
January 15, 2026 at 5:27 PM
We've released fixes for 5 CVEs affecting the Svelte ecosystem. Please upgrade your apps!
Read the post to learn if you're affected:
svelte.dev/blog/cves-af...
Read the post to learn if you're affected:
svelte.dev/blog/cves-af...
Finally I can hit management’s goal of zero CVEs!
April 15, 2025 at 5:57 PM
Finally I can hit management’s goal of zero CVEs!
The post-quantum cryptography timeline accelerating at the same time that mythos is creating mass CVEs is really threatening to alter my roadmaps
April 7, 2026 at 7:19 PM
The post-quantum cryptography timeline accelerating at the same time that mythos is creating mass CVEs is really threatening to alter my roadmaps
No more CVEs? Sweet. Fewer vulns to remediate. Right? Right? 🥹
April 16, 2025 at 5:17 AM
No more CVEs? Sweet. Fewer vulns to remediate. Right? Right? 🥹
I've been awarded several documented CVEs for container and sandbox escapes. I have also reported a number of additional escapes that were verified but did not receive CVEs
I worked on security at Docker
I'm not surprised by what happened with Huggingface
The problem is not AI, it is with people
I worked on security at Docker
I'm not surprised by what happened with Huggingface
The problem is not AI, it is with people
September 19, 2026 at 8:02 PM
I've been awarded several documented CVEs for container and sandbox escapes. I have also reported a number of additional escapes that were verified but did not receive CVEs
I worked on security at Docker
I'm not surprised by what happened with Huggingface
The problem is not AI, it is with people
I worked on security at Docker
I'm not surprised by what happened with Huggingface
The problem is not AI, it is with people
With CVEs like these, who needs enemies
September 9, 2025 at 3:03 AM
With CVEs like these, who needs enemies
nobody wants soulless mechanical CVEs slopped out by a slop machine. people want to get pwned by something real, something deliberate and human,
April 7, 2026 at 8:59 PM
nobody wants soulless mechanical CVEs slopped out by a slop machine. people want to get pwned by something real, something deliberate and human,
and they still try to say christianity is a good thing
February 16, 2026 at 8:45 PM
and they still try to say christianity is a good thing
Rust CVEs be like “this dep somewhere deep in your tree has undefined behavior on 3 known embedded devices.” JS CVEs be like “every React component is a Bitcoin miner now.”
December 4, 2025 at 2:02 PM
Rust CVEs be like “this dep somewhere deep in your tree has undefined behavior on 3 known embedded devices.” JS CVEs be like “every React component is a Bitcoin miner now.”
Breaking News!🚨📰 The top major security🔐 CVEs (Common Vulnerabilities and Exposures) for 2025 🎉has been leaked! Have a look! 👀
December 28, 2024 at 1:50 PM
Breaking News!🚨📰 The top major security🔐 CVEs (Common Vulnerabilities and Exposures) for 2025 🎉has been leaked! Have a look! 👀
rsc cves dropping like cloudflare uptime
December 12, 2025 at 8:45 AM
rsc cves dropping like cloudflare uptime
MAGA Regime CVEs
In cybersecurity, CVEs are “common vulnerabilities & exposures.” These are the cracks in the system adversaries exploit.
Political CVEs are those cracks in an authoritarian regime, points of vulnerability that can be exposed & exploited by defenders of democracy.
In cybersecurity, CVEs are “common vulnerabilities & exposures.” These are the cracks in the system adversaries exploit.
Political CVEs are those cracks in an authoritarian regime, points of vulnerability that can be exposed & exploited by defenders of democracy.
February 20, 2025 at 4:05 AM
MAGA Regime CVEs
In cybersecurity, CVEs are “common vulnerabilities & exposures.” These are the cracks in the system adversaries exploit.
Political CVEs are those cracks in an authoritarian regime, points of vulnerability that can be exposed & exploited by defenders of democracy.
In cybersecurity, CVEs are “common vulnerabilities & exposures.” These are the cracks in the system adversaries exploit.
Political CVEs are those cracks in an authoritarian regime, points of vulnerability that can be exposed & exploited by defenders of democracy.
No more CVEs assigned from the source?
The downstream consequences of a pause will leave us drowning in bugs of many other names, & we won’t spontaneously sprout gills.
We really don’t have time for this.
The downstream consequences of a pause will leave us drowning in bugs of many other names, & we won’t spontaneously sprout gills.
We really don’t have time for this.
Uncle Sam abruptly turns off funding for CVE program. Yes, that CVE program
Uncle Sam abruptly turns off funding for CVE program. Yes, that CVE program
Because vulnerability management has nothing to do with national security, right?
US government funding for the world's CVE program – the centralized Common Vulnerabilities and Exposures database of product security flaws – ends Wednesday.…
dlvr.it
April 16, 2025 at 12:58 AM
No more CVEs assigned from the source?
The downstream consequences of a pause will leave us drowning in bugs of many other names, & we won’t spontaneously sprout gills.
We really don’t have time for this.
The downstream consequences of a pause will leave us drowning in bugs of many other names, & we won’t spontaneously sprout gills.
We really don’t have time for this.
do robot girls get tested for CVEs
July 8, 2026 at 9:37 AM
do robot girls get tested for CVEs
Very interesting data point
April 25, 2025 at 12:20 PM
Very interesting data point
cves dont exist if u dont know about them
/s
/s
explodeing depemdabot
March 27, 2026 at 3:13 PM
cves dont exist if u dont know about them
/s
/s
I wonder how many V8 CVEs are in there lol
November 30, 2024 at 4:43 AM
I wonder how many V8 CVEs are in there lol
ooh this also means i now have cves in all major browsers!
January 13, 2026 at 8:31 PM
ooh this also means i now have cves in all major browsers!
Instabtly eliminate all CVEs with this one simple trick!
wipe your servers
wipe your servers
April 8, 2026 at 7:21 PM
Instabtly eliminate all CVEs with this one simple trick!
wipe your servers
wipe your servers
they call me the chief vibecoding executive cause all I make is CVEs
chief executive vibecoder
April 30, 2026 at 9:52 PM
they call me the chief vibecoding executive cause all I make is CVEs
The Go Security team developed exactly the same position, and we have the same problem with CISA “enriching” our CVEs.
January 23, 2025 at 12:03 PM
The Go Security team developed exactly the same position, and we have the same problem with CISA “enriching” our CVEs.
Fixes for a critical rsync vulnerability (CVE-2024-12084) have been released for Stable/Bookworm, Testing and Unstable. Oldstable/Bullseye is not affected. Fixes for other lower severity CVEs have also been released in the same update and can all be tracked at… #debian
Fixes for a critical rsync vulnerability (CVE-2024-12084) have been released for Stable/Bookworm, Testing and Unstable. Oldstable/Bullseye is not affected. Fixes for other lower severity CVEs have…
Fixes for a critical rsync vulnerability (CVE-2024-12084) have been released for Stable/Bookworm, Testing and Unstable. Oldstable/Bullseye is not affected. Fixes for other lower severity CVEs have also been released in the same update and can all be…
dlvr.it
January 14, 2025 at 8:08 PM
Fixes for a critical rsync vulnerability (CVE-2024-12084) have been released for Stable/Bookworm, Testing and Unstable. Oldstable/Bullseye is not affected. Fixes for other lower severity CVEs have also been released in the same update and can all be tracked at… #debian
Docker is just tempting fate
August 6, 2025 at 7:20 PM
Docker is just tempting fate