PYSEC-2019-125.yaml seems to be entirely unrelated to Python per https://hackerone.com/reports/682774