[lazgeo]

Updates

• CVSS v4

Comments
Sorry I didn't see this report before I posted my more detailed report on the matter. It is far exceeding what was initially reported here. More details in GHSA-xfvf-9f98-8j44

[github]

Hi there @alex! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[alex]

I regard CVSS scores as a waste of time and will not review them. I specified a severity, that's all I'll do.

[lazgeo]

Yeah, sorry about that. It didn't allow me to post a comment without an update. You can disregard that but it was more a heads up that I posted more details on this matter in my report as it reaches far beyond just pip.