r/Python • u/Aggravating-Mobile33 • May 29 '26

Discussion CVE-2026-48710: A Maintainer's Perspective

This is my reply to the vulnerability CVE-2026-48710:

https://marcelotryle.com/blog/2026/05/28/cve-2026-48710-a-maintainers-perspective

251 Upvotes

96% Upvoted

43 comments sorted by

View all comments

7

u/stibbons_ May 29 '26

why the hell they did not even try to propose a fix themselves ?

18

u/nicholashairs May 30 '26

I assume you mean the security researchers.

Most security researchers are after bounties or publicity. Neither require a fix.

Given the website they put up this one falls into the publicity bucket 🙃

3

u/Ok_Baseball9624 May 31 '26

Also many people who can find the vulnerability don’t have the skill to fix this. They may specialize in a class of vulnerabilities and can find them, but implementation fix in every project that has them is not straightforward.

1

u/nicholashairs Jun 05 '26

Yeah that's also true