Thread

1. JamesCoyne · 1790283334 · focus · HN ↗

   Really commendable work fixing up the upstream python project. I don't think there's anything to be embarrassed about in the timeline.

   1. arusekk · 1790290656 · focus · HN ↗

      I would prefer to do a super proper disclosure with coordinated release dates and everything. My first submitting to SourceHut security ML ended up making the vuln existence somewhat public before upstream ever knew.

Unofficial Hacker News client; not affiliated with Y Combinator.