The current version (0.9.5.0) is not affected by the CVE which affects versions at least earlier than 0.9.4.0. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>