Hacker News Reader

Someone should reestimate severity of those "CVEs". I got 10 warnings and none of them is any severe for my app(and yours too, likely), so I'm definitely not vulnerable.

Also LOL "CSRF Vulnerability in jquery-rails" is known as not a bug at all.

View on HN

Wouldn't be the first time you sent us a PR, Egor :D.

But yeah, we do need to find the time to clean it up.

Just don't want it to be yet another "We found 123 vulnerabilities, sign up to learn more". E.g. if it's Rails RCE it confidence should be 3/3, if some app-specific, 2/3 etc. But anyway great job

Reply on news.ycombinator.com