Dependabot CVE-2022-29622 alerts

[jbennettufl]

Select Topic Area

Question

Body

I normally would not ask about this however this particular CVE is from 2022 and some organizations have downgraded it or even claim it isn't a real vulnerability. Received an alert that this was updated 16 hours ago. I cannot tell much about the change of this status just that it is a high ranking vulnerability and cannot see how or where it was updated. The issue is here and just says it was reviewed and updated. Is there any more information available regarding this through dependabot concerning why it would come up again?

[jbennettufl]

Looks like it was revoked on April 25th.