Hacker News new | past | comments | ask | show | jobs | submit
If I remember correctly, we had to patch or provide justification for CVEs flagged by tools like AWS Inspector for SOC2 as well.
So you didn't have to patch all of them.
loading story #49155160