On Wed, Jul 17, 2024 at 04:08:34AM +0000, jgart wrote: > I provided gunicorn-next in a recent commit to master which fixes > CVE-2024-1135 but I don't have time at the moment to fix the bad gunicorn's > dependents* against gunicorn-next.
I'm not sure I understand the question. Gunicorn-next contains the CVE fix, but gunicorn does not? Is that correct?