mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-06-09 14:53:47 +00:00
Fixes #517172 for release-25.11. Not-cherry-picked-because: `beets` has had too many breaking changes in the releases between 2.5.1 (version on `release-25.11` branch), and 2.11.0 (latest release). Hence backporting all of these changes is not appropriate. Also since this vulnerability is not so severe - affects only the bundled web UI and users who wish to cling onto release-25.11 for the rest of the month, can still install beets with this vulnerability and live with it.