Zachary Ware <zachary.w...@gmail.com> added the comment:

Does it matter?  This is not a library, it is a script used occasionally by a 
release manager, called manually, and the only input to the regex is provided 
via a command-line argument in that manual call.  I don't think Steve plans to 
REDoS himself :)

----------
components: +Installation, Windows -Library (Lib)
nosy: +paul.moore, steve.dower, tim.golden, zach.ware
type: security -> behavior

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue41712>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to