Z.ai's Security Ledger Reveals 2,436 Vulnerabilities, Some Lurking for 45 Years

Z.ai Security Disclosure

▲ 18Alifatisk1 HN discussion

Z.ai's new security disclosure ledger catalogs 2,436 vulnerabilities across 269 open-source projects, with 1,097 rated critical or high severity. The findings span 45 years, with the oldest bug dating to 1981 and an average dwell time of 26.6 years. Notable recent disclosures include a Linux kernel use-after-free, a WebKit memory handling flaw, and a FreeBSD ptrace issue.

These vulnerabilities span a 45-year impact period—the earliest flaw dates back to 1981, with an average dwell time of 26.6 years before discovery.
Read original →HN discussionRSS