Are small tools safe enough for self-hosting?

Summary

The transcript discusses the potential security risks of self-hosting small software projects, specifically focusing on a vulnerability discovered in the Nginx Proxy Manager. The speaker highlights a critical CVE (Common Vulnerability and Exposure) involving an OS Commander injection that could allow authenticated attackers to execute arbitrary commands, and notes deeper concerns about the project's lack of a formal security reporting process. Ultimately, the discussion raises important questions about the safety and reliability of smaller open-source software projects in home lab and self-hosting environments, emphasizing the need for robust security practices and responsible vulnerability management.