Potential OOB vulnerability may happen about catboost HOT 4 OPEN

Fortunately CatBoost builds themselves do not use this code directly, it is only there for tests.

But thank you anyway.

from catboost.

So there is no need to fix this vulnerability?

from catboost.

So there is no need to fix this vulnerability?

If vulnerable code is present in the repository it is still not right, even if it is not used. So we'll deal with it (most likely by removing it from contrib).

I'm just saying that you can be certain that this vulnerability won't affect you if you use CatBoost artifacts from the releases or build them from the source code yourself.

from catboost.

So there is no need to fix this vulnerability?

If vulnerable code is present in the repository it is still not right, even if it is not used. So we'll deal with it (most likely by removing it from contrib).

I'm just saying that you can be certain that this vulnerability won't affect you if you use CatBoost artifacts from the releases or build them from the source code yourself.

ok, thank you for your reply!

from catboost.