Status of CVE-2024-43598?

[tobiass-sdl]

Hi,

what is the status of CVE-2024-43598? It claims that all versions below 4.6.0 are vulnerable but the latest version is 4.5.0. So either the information is bogus or it was written by someone who knows that there will be no 4.5.1...
I do not see any commit around November that looks like a fix...

Is this CVE genuine at all or is lightgbm the victim of a bogus CVE?

[shiyu1994]

@tobiass-sdl A PR to fix this issue is created #6752

Thanks for the reminder.

[StrikerRUS]

Fixed by #6752.