Filippo Valsorda :go: on Nostr: "On behalf of the WordPress security team, ..." and then many mentions of "fixing a ...

"On behalf of the WordPress security team, ..." and then many mentions of "fixing a security issue" without specifying what it is. (The patch is, presumably, public since the plugin is OSS and PHP?)

https://wordpress.org/news/2024/10/secure-custom-fields/

I don't have an opinion on the broader Wordpress situation, but seeing a security exception used to wield power in a broader controversy is extremely worrying.

Open source communities trust security teams with exceptional powers, and weakening that trust damages everyone.