Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Given that the actual vulnerability seems relatively niche along with it being such a popular library officially maintained by the Python foundation, the scariest line in the advisory is almost certainly:

The vulnerability was originally reported to the library maintainers on September 12, 2024, but no fix is available.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: