Ant Stanley on Mythryl: “Right now Bun / Anthropic are being deeply irresponsible. They've…”

Right now Bun / Anthropic are being deeply irresponsible. They've landed fixes on main for the QUIC, eMudhra and TLS validation vulnerabilities, and the Brotli fix is just updating a dependency. They need to ship and fix the worst vulnerabilities now, then ship a follow up with the rest.

Ant Stanley@iamstan.dev

The last Bun release was 1.4.3 on 10 October. I used DeepSeek to scan the open PRs and committed PRs since 1.4.3 and found 15 security fixes that are still not shipped. Release gap: github.com/antstanley/b... Full scan results: github.com/antstanley/b...

22/10/26, 8:39 am0 reposts2 likes

Post