Security vulnerability affects the tcpflow package. A stack-based buffer over-read exists in setbit() at iptree.
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-LS10214.json"