>Again: References, please, otherwise you're just making FUD. CVE-2019-17571 CVE-2021-4104 there might be others
Once again: CVEs in 1.x are real (it exists now). "pull requests created for 1.x" is theoretical (it does not exist now, and it does not harm if that really happens). Vladimir
