Hacker News new | ask | show | jobs
by detaro 1654 days ago
As I understand it that prevents the RCE, but not other variants like leaking environment variables.
1 comments
throwaway_JiY4E 1654 days ago
> other variants like leaking environment variables.

I'll google/search more about these. I assume if we say RCE is a 10 for risk, then maybe others are 5 or 3?

link
detaro 1654 days ago
CORRECTION: apparently latest Java is also vulnerable: https://twitter.com/_MG_/status/1470452714203086851
link