There is no timeline besides when I reported it and now minus 2wks. They never told me when the fix was deployed.
There is little value in going through the email chains to note each date:(. Final decision was made 2020-11-19
There is little value in going through the email chains to note each date:(. Final decision was made 2020-11-19
At the moment the 'has been fixed' is the only clue to this in terms of resolution, and it's tucked away; without it it looks like most of the README is attempting to capitalize on the shock/outrage factor.
Edit: Thanks, author has added some dates.
https://github.com/oskarsve/ms-teams-rce/commit/35eac619fdef...