Larson: Are insecure code completions a vulnerability?

Seth Larson reports PyCharm’s Full Line Code Completion plugin repeatedly suggesting code that could create severe vulnerabilities, raising uncertainty about whether this should be treated as a security issue or receive a CVE. After reporting it to JetBrains and waiting 90 days, he found the behavior unchanged in a newer version.