Just a rumour of a bug is enough to find a security exploit these days
Simon Willison’s Weblog 1 month ago 18
OCaml and other open-source maintainers report that security exploit attempts are showing up within minutes after patches are shared for discussion. Nick Craig-Wood says rclone went from about 20 disclosures in its first 10 years to over 40 in the last month. Maintainers argue this speed is outpacing current embargo and CVE processes, so open-source security workflows need to change.