forgetfulA "gentle" reminder that the CVSS 4.0 public preview is open until July 31st. Go play with that calculator!
Billy O'Neal@forgetful @bagder have you given up all hope on making CVSS for curl make sense?
daniel:// stenberg://@malwareminigun @forgetful I'm an optimist but I'm not sure changing CVSS actually changes much. A fundamental problem is still that there are several subjective "grades" in there and then you can go high or you can go low and we know how NVD will do it.
@bagder @malwareminigun Daniel if you have ideas to make the standard less open to interpretation the SIG will be happy to review your suggestions, however the rfc period is coming to an end in 4 days.
@forgetful @malwareminigun thanks, but I don't have the bandwidth the get involved there...