Dirk Eddelbuettel wrote: > Just FYI the view of R Core (upstream) and the R Foundation (I'm on the board) > is that this is a nothingburger. We would love for the CVE to be retracted > but nobody (among a team of volunteers) has time or energy to pursue this. > > See > https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/index.html > for the official statement.
JFTR, I've sent a request to mark this CVE as rejected, with a reference to the statement above. Cheers, Moritz