Graphviz is another "heart bleed" / "log4j" / ...
Because a lot of big companies use it (and they spend 0 €/$/... in the project), and it is broken from several years...
Because a lot of big companies use it (and they spend 0 €/$/... in the project), and it is broken from several years...
We do voluntarily act on CERT advisories.
But, true.