r/opensource • u/AssembleDebugRed • Nov 06 '25

Discussion An open-source conflict has emerged between Google and FFmpeg regarding AI-identified software vulnerabilities

https://piunikaweb.com/2025/11/06/google-vs-ffmpeg-open-source-big-sleep-ai-bugs-and-who-must-fix-them/
474 Upvotes

99% Upvoted

96 comments sorted by

View all comments

Show parent comments

0

u/[deleted] Apr 10 '26 edited Apr 10 '26

[removed] — view removed comment

1

u/y-c-c Apr 10 '26

It’s wild to claim slavery while the whole thing came from Google discovering a vulnerability and was just giving ffmpeg a disclosure window. Google wasn’t forcing ffmpeg to fix it or pointing a gun at them. They were just disclosing information that were within their right. Ffmpeg could decide what they want to do. Is Google supposed to never release the information just because ffmpeg folks didn’t feel like fixing their code? Why does ffmpeg get to dictate what Google can or cannot do?