False Positive OSV Advisories Reported by Amazon Inspector

github.com

1 pointjoeyhage1 comment

Currently 46 advisories are being withdrawn. Impacted both pypi and npm dependencies. JFrog Security reported [1] that this caused many bricked deployments.

[1] https://x.com/JFrogSecurity/status/2059188666421940244

Reply on news.ycombinator.com