Skip to content

Final follow-up for GHSA-wr6f-c7g2-gmfj (reported March 6, 2026; follow-up April 4, 2026). #145

@Teycir

Description

@Teycir

@iden3/owners @xavi-pinsach @alrubio

Final follow-up for GHSA-wr6f-c7g2-gmfj (reported March 6, 2026; follow-up April 4, 2026).

Required advisory information is complete, patch guidance and reproduction context are already provided, and publication is currently blocked on owner action (CVE request + remediation status).

Please confirm by April 8, 2026 (23:59 UTC):

  1. advisory owner,
  2. CVE request submission date (GitHub CNA path),
  3. remediation target date / fix status,
  4. expected publish window for this advisory.

I can immediately assist with fix validation and final metadata text once owner workflow is confirmed.
If no response by the deadline, I will proceed with coordinated escalation through GitHub Security support to unblock maintainer engagement and CVE workflow.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions