You “wouldn’t be surprised” if curl issues a CVE for the existence of the -o fla... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		dcrazy 85 days ago \| parent \| context \| favorite \| on: Uncontrolled File Write/Arbitrary File Creation You “wouldn’t be surprised” if curl issues a CVE for the existence of the -o flag?

porridgeraisin 84 days ago [–]

It was sarcastic. Because of the ...low signal-noise ratio... in CVEs these days.

dcrazy 83 days ago | [–]

curl has become their own CNA specifically because so many useless CVEs about curl were being issued by other parties: https://daniel.haxx.se/blog/2024/01/16/curl-is-a-cna/

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact