HOW I DISCOVERED A 9.8 CRITICAL SECURITY VULNERABILITY IN ZEROMQ WITH MOSTLY PURE LUCK AND MY TWO CENTS ABOUT XZ BACKDOOR

Summary from the TLDR Web Dev newsletter

While working on a project, this developer accidentally discovered a serious security flaw in the ZeroMQ library. The flaw was serious and reminded them of the recent infamous xz backdoor incident. Both flaws could've been prevented. Open-source contributors and maintainers should prioritize focused features and utilize tools like Valgrind to prevent similar security risks.