Sneaky Python package security fixes help no one – except miscreants

Good thing these eggheads have created a database of patches

Python security fixes often happen through “silent” code commits, without an associated Common Vulnerabilities and Exposures (CVE) identifier, according to a group of computer security researchers.…