3 ms·
> It's still bad they didn't file a CVE for it, knowing that other languages did so. It reduces trust in their ecosystem. Curiosity question: Do you know if py
by adev_ 3y ago
> It's still bad they didn't file a CVE for it, knowing that other languages did so. It reduces trust in their ecosystem.
Curiosity question: Do you know if python has also a CVE for this exact same problem ? I am not able to find it back through their git history.
- lifthrasiir 3y agoIn my understanding, no. I believe it was bpo-4489 [1], and I couldn't find a matching advisory from the PSF's database [2] which should contain most historical advisories as well (it does seem to miss earliest advisories like PSF-2005-001 and PSF-2006-001 though). [1] https://github.com/python/cpython/issues/48739 https://github.com/python/cpython/issues/48739 [2] https://github.com/psf/advisory-database/ https://github.com/psf/advisory-database/