Please note that freedombox has implemented a workaround for this issue. The workaround is to avoid use of Django 2.1 decorator:
https://salsa.debian.org/freedombox-team/freedombox/-/commit/591ed5c4ae5d4154b66fb3c59b5ff54bcf53839b So while it would be nice to get the fix from upstream, it is not strictly required to avoid the issue. Therefore I would propose that the severity can be lowered. -- James
OpenPGP_signature
Description: OpenPGP digital signature