GLSA-201911-02 : pump：受用户协助的任意代码执行

* Changelogs are generally available for changes made after Nov 1, 2022