The original upstream issue was closed 2024-02-28. The CVE is mentioned in <URL: https://github.com/openNDS/openNDS/issues/600 >, closed 2024-05-29. I thus suspect a new upstream version will fix this issue. -- Happy hacking Petter Reinholdtsen