EPSS
Percentile
39.4%
fedmsg is missing message validation. The library contains a bug where the base class’ default value does not enable signature validation.
github.com/fedora-infra/fedmsg/blob/0.18.2/CHANGELOG.rst