Skip to main content

mastodon - Link to source

This #curl Friday graph is the "CVE age in code" one refurbished. I cleaned it up a little and added a median plot to it next to the average. Very similar!

The graph shows all 145 curl CVEs and the number of days each of them existing in shipped source code until fixed.

#curl
in reply to daniel:// stenberg://

Lambda
mastodon - Link to source
Lambda
• •
that's a really good graph! Interesting to see that there are still vulnerabilities being found that have been there since day 1.
Unknown parent

daniel:// stenberg://
mastodon - Link to source
daniel:// stenberg://
• •
@krinkle the X axis are all the CVEs and they have not been reported linearly over time
@Timo Tijhof
⇧