Commits on Aug 23, 2021

1. doc: add duplicate CVE check in sec. release doc …

   This commit adds a note about only creating a CVE for Node.js
   vulnerabilities.
   
   The motivation for this is a recent HackerOne report where I created a
   CVE for a c-ares issue. This CVE should have been created by the c-ares
   project, and it was later, but we never updated our HackerOne report to
   use their CVE number. Hopefully this extra note in the release doc will
   help us check for this situaion and avoid this in the future.
   
   Refs: https://hackerone.com/reports/1178337

   

   danbev committed Aug 23, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for 8017db8
   • Browse repository at this point

   Copy the full SHA

   8017db8 View commit details

   Browse the repository at this point in the history