LibraryScenariosHow to handle discovering critical open source vulnerabilities
Scenario

How to handle discovering critical open source vulnerabilities

I discovered a major security vulnerability in popular open source software and now I'm terrified about both disclosing it and not disclosing it.

Laozi
Online
The coach is replying

More people experience this than they realize.

What we've seen

Knowledge of others' weaknesses becomes a burden we never asked to carry.

Ideas that help explain it
Worth thinking about

“Where Are You with Open source as philosophy?”

If this sounds familiar, the Library can help you find the bigger picture.