zlacker

[parent] [thread] 1 comments
1. Pharao+(OP)[view] [source] 2025-12-05 17:33:08
https://react.dev/blog/2025/12/03/critical-security-vulnerab...

Privately Disclosed: Nov 29 Fix pushed: Dec 1 Publicly disclosed: Dec 3

replies(1): >>drysar+71
2. drysar+71[view] [source] 2025-12-05 17:38:43
>>Pharao+(OP)
Then even in the worst case scenario, they were addressing this issue two days after it was publicly disclosed. So this wasn't a "rush to fix the zero day ASAP" scenario, which makes it harder to justify ignoring errors that started occuring in a small scale rollout.
[go to top]