romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-10 06:37:14 +03:00
Code Issues Projects Releases Packages Wiki Activity

VULN-DISCLOSURE-POLICY.md: issues that should be found by tests are LOW

Browse source 
Closes #22190
This commit is contained in:
Daniel Stenberg 2026-06-26 16:23:08 +02:00
parent 9f9d2d10d9
commit 58771cf4f3
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/VULN-DISCLOSURE-POLICY.md
View file

@ -183,6 +183,10 @@ trigger. Due to timing, platform requirements or the fact that options or
protocols involved are rare etc. [Past
example](https://curl.se/docs/CVE-2022-43552.html)
Issues that are likely to be detected by basic testing are likely to not be
considered more severe than **Low**. Users that do not test cannot be expected
to have secure setups to begin with.
## Medium
This is a security problem that is less hard than **Low** to exploit or