Signify allows a remote attacker to escalate privileges via the signed_data.py and the context.py components
An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py components