Hacker News Reader

Interestingly, a CVE has been assigned for this issue: https://www.cve.org/CVERecord?id=CVE-2023-49298

It says because it could overwrite config files but not always a security problem.