# Risky Biz Soap Box: How to measure vulnerability reachability

An episode of [Risky Business](https://invisiblenetwork.ai/podcast/216478078), 14 Aug 2025, 36 min.

Audio: https://dts.podtrac.com/redirect.mp3/media3.risky.biz/soapbox99.mp3

In this Soap Box edition of the Risky Business podcast Patrick Gray chats with Socket founder Feross Aboukhadijeh about how to measure the reachability of vulnerabilities in applications. It’s great to know there’s a CVE in a library you’re using, but it’s even better if you can say whether or not that vulnerability actually impacts your application. They also talk about how Socket started out as a way to discover malicious packages in software projects, but these days it’s playing the CVE game as well. This episode is also available on Youtube. Show notes

Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them.