> tl;dv names their microservices after pasta. A subdomain scan reveals cappellini, carbonara, fusilli, pasta, penne, puttanesca-v0, and ravioli, all under tldv.io. An entire Italian restaurant worth of Express servers.

Pretty appropriate, given a vulnerability of this severity. Literal microservice spaghetti.

(Also, please, let's all move back to boring names for services and servers. Nobody likes trying to decode what all these silly names mean.)

EDIT:

omg, the disclosure communication is infuriating.

> We're on it. It needs some time, but rest assured we're following through. For further communication, i'll recommend reaching out to our CTO

This should have been a P1 that was fixed same day, and they strung him along for months. Absolute amateurs.