Ben Walding

Has anyone done this work on the side (and perhaps not contributed it back for integration) - it's causing sufficient irritation to us in our workflow that I'll have one...

@lamby Does https://github.com/openid/ruby-openid/pull/121 address CVE-2019-11027 ? I saw mention of SSRF and behaviour similar to that in the marc.info mailing list posts for the CVE. It isn't part of 2.8.0...

> @bwalding > > > I'll have one of my team implement this if necessary > > Did your team done it? Is there any related PR? There wasn't any...