{"uuid": "48b42d28-29e7-44fe-9a55-251cc3aa542f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117139525002330094", "content": "We all know that CVE references age over time, and eventually none of the references exist anymore.  (See also: people who run websites usually don't understand the concept of the World Wide Web)\nCase in point:The recent GitLab CVE-2026-19478 and CVE-2026-19650\nOut of the three references, one of them simply doesn't exist, and one of them is hidden behind a login requirement, after which you're told that you cannot access it.\nWhy wait for references to age out over time when you can make them worthless right at publication time?  \ud83d\ude02", "creation_timestamp": "2026-08-22T14:01:45.195252Z"}