Vendor Check-In

[pickleMan2]

Hello Team,

I'm requesting a response pertaining to the attached CVE-2022-42966. Is a patch in progress? If not is there a remediation timeframe in place? Please let us know if you have any questions or if there is a better place to reach out to.

GHSA-2p9h-ccw7-33gf

[Secrus]

The CVE was patched before Cleo 2.0 release. See #285. All current Cleo versions shouldn't be affected.