# Pull 4961 question

**URL:** https://meta.discourse.org/t/pull-4961-question/69429
**Category:** Development
**Created:** [September 5, 2017, 8:18pm UTC](https://meta.discourse.org/t/pull-4961-question/69429 "2017-09-05T20:18:00Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Brian\_Martin](https://avatars.discourse-cdn.com/v4/letter/b/47e85d/32.png) [@Brian\_Martin](https://meta.discourse.org/u/Brian_Martin)
#### Post date: [September 5, 2017, 8:18pm UTC](https://meta.discourse.org/t/pull-4961-question/69429/1 "2017-09-05T20:18:00Z")

</div>

The following PR and Commit was flagged as SECURITY:  
[https://github.com/discourse/discourse/pull/4961](https://github.com/discourse/discourse/pull/4961)  
[https://github.com/discourse/discourse/pull/4961/commits/7023260786524fe7fde2043268a6283bdf461c1a](https://github.com/discourse/discourse/pull/4961/commits/7023260786524fe7fde2043268a6283bdf461c1a)

Can anyone explain the scenario / risk for this?

Thanks!

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [September 5, 2017, 8:54pm UTC](https://meta.discourse.org/t/pull-4961-question/69429/2 "2017-09-05T20:54:35Z")

</div>

This has to do with a potential vulnerability that may affect users of the software and as such we do not feel comfortable disclosing the details at this time.