GitHub release notes for 23.0.0 erroneously includes claim to fix CVE-2024-1135

benoitc / gunicorn

gunicorn 'Green Unicorn' is a WSGI HTTP Server for UNIX, fast clients and sleepy applications.

http://www.gunicorn.org

Other

9.88k stars 1.76k forks source link

Open mjpieters opened 4 weeks ago

mjpieters commented 4 weeks ago

CVE-2024-1135 was fixed in 22.0.0, and this fact is included in the 22.0.0 GitHub release notes.

However, the GitHub release for 23.0.0 also includes this claim:

Fix CVE-2024-1135

This line is not part of the project changelog for 23.0.0 so it appears to be an editing error.