The End of Embargo Era: CERT's CVE Release for Dnsmasq Exposes a Larger Problem The recent release by CERT of six CVEs for serious security vulnerabilities in dnsmasq marks a significant turning point in the way we approach bug management and disclosure.
This shift is driven by the accelerating pace of AI generated bug reports, which has made the traditional embargo based approach increasingly obsolete.
Long standing bugs in widely used software like dnsmasq are often only discovered by external researchers or security teams, highlighting a systemic issue: the lack of internal resources and expertise within vendors to detect and fix critical vulnerabilities proactively.