A 7.5-year-old CVE, a 42-line patch, and the afternoon nobody had

<p>Two lines reproduce it:<br> </p> <div class="highlight js-code-highlight"> <pre class="highlight python"><code><span class="kn">import</span> <span class="n">markdown</span><span class="p">,</span> <span class="n">time</span> <span class="n">t</span> <span class="o">=</span> <span class="n">time</span><span class="p">.</span><span class="nf">perf_counter</span><span class="p">()</span> <span cl

Read the source →