And now for a much more succinct explanation. Thank you @k8em0
Security pros & hackers need to *learn to read actual legislation* themselves instead of blindly accepting what someone else wrote in a tweet & retweeting it as fact, complete with outrage/incredulity.
That bill allows for DoD to buy software with known CVEs that are *mitigated*.
GIF
![Version color legend:
<red> : Major version update or pre-release version. Possible breaking changes.
<yellow>: Minor version update. Backwards-compatible features added.
<green> : Patch version update. Backwards-compatible bug fixes.
Upgrading package Microsoft.ApplicationInsights.AspNetCore...
Project hanselminutes.core [net6.0] upgraded successfully](https://cdn.statically.io/img/pbs.twimg.com/media/FaUKsuZVQAEk78I?format=webp&name=large)