Josh and Kurt talk about a newly rediscovered old python vulnerability. It raises a lot of questions about what was OK in 2007 vs what's OK in 2022. The issue is very complicated and has a wild story surrounding it. There is no reason to not fix this in 2022.

Show Notes * CVE-2007-4559 * Red Hat Bug * Register story * Response from upstream * Upstream patch * ZippSlip * Current upstream bug * CSURF