Kaixuan Li

Hi bro. did you notice that the commit msg is same with the existing patch commit for this cve? the patch I updated is for v3.0.0, and the current patch...

Hi, you can see the root cause of this CVE on the NVD or CVE website. and the commit msgs and code diff of these commits show their intention for...

@darakian , hi, I wonder what additional information or format you want? :( it seems the commit msg explicitly claims it fixed the issue 306 https://github.com/ESAPI/esapi-java-legacy/issues/306. the issue is also...

Ok, I got it~ Maybe the `README.md` is confusing. hhh  Anyway, thanks for your kind reply and advice!

Oh, I made a mistake for it. So sorry! Hhh Thanks!

Hi, @smonicas, thanks for your prompt response. I really appreciate the explanation! I understand now that this false positive occurs due to Slither's current field-insensitive analysis when handling structs, where...

Hello @shelbyc, Sorry for the delayed reply. I appreciate your perspective on this issue and understand the concern regarding duplicate references. However, I believe the commit apache/tapestry-5@95846b1, though appearing similar,...