Hacker News Reader

This seems to be incorrect, the current version has no CVEs according to that tracker.

I think the parent comment is just saying that multiple vulns have been found recently. There's a good chance there's more.

Not sure if this is bad? Should we abandon any lib that has cve?

YES! Also, make sure to disinfect the computer EVERY NIGHT with rubbing alcohol to be safe from VIRALS!