Ubuntu
python-asgiref package

  1. Bug #1953173
  2. Comment #6

Comment 6 for bug 1953173

Revision history for this message
Rodrigo Figueiredo Zaiden (rodrigo-zaiden) wrote :

From:
 https://github.com/django/asgiref/issues/317

Upstream confirmed that it is in fact an issue, but, it's not exploitable.
My understanding is that it will hit other guards before falling in that case.
And, changing it would be a potential risk of breaking other things.

I'm pretty satisfied with the upstream response time and quality.