What do you do with CVEs that have no patch yet?
Our scans keep finding vulnerabilities that have no upstream fix, or where upgrading would break something. How do you assess these, reduce the noise, and show an auditor…
Our scans keep finding vulnerabilities that have no upstream fix, or where upgrading would break something. How do you assess these, reduce the noise, and show an auditor…