vin01

Looks like a license key is required even for using this great open source tool in other open-source projects? wow!

Hash updates are needed because of following issues: https://github.com/pytest-dev/pluggy/issues/228 https://github.com/pytest-dev/pluggy/issues/135

If you need more examples of such CVEs, other notable projects on Github which have faced this issue in recent past include: keepassxc, scipy, h2. I have compiled a list...

also affected by this, it seems to be caused by https://github.com/bitwarden/self-host/pull/440 it assumed that the script is only run interactively by a user. Perhaps an env var can be checked...

can't say I am proud of this workaround, but if it helps anyone else while this is being discussed .. ``` yes N | sudo -u bitwarden /var/lib/data/bitwarden/bitwarden.sh start ```