The good news is that we managed to get CVE-2022-23529 revoked. The bad news is we won’t get back the time devs and sec engineers around the world spent triaging and fixing this. Lets do better goin forward. CVEs should have a meaningful attack path.

