VB006: No cure worse than the disease¶
A vulnerability report can be safely dismissed if the consequences of addressing it are worse than the consequences of the vulnerability itself.
Examples¶
- Most ReDoS "vulnerabilities" require significantly more maintainer effort and attention to triage than their threat/risk actually warrants.