The CVE That Didn't Matter (And The One That Did)
CVE-2024-CRITICAL. Score 9.8. The security team sends the alert. All-hands emergency meeting scheduled.
Our response: scheduled for next sprint.
Why? Because CVSS 9.8 doesn't mean anything until you know the actual risk.