Have submitted confidentially pull requests that fix...

Have submitted confidentially pull requests that fix both their main branch and currently released version.

(yes, I manually backported the fix from main branch to their last release because the vulnerability is that critical to fix)

Awaiting response from the project maintainers now.

Like 8 February at 2:36 | Open on hachyderm.io

4 comments

Emelia 👸🏻

Update: working with the maintainers to release a fix ASAP, but details of the vulnerability will be embargoed until admins have had a chance to upgrade.

9 February at 0:32 | Open on hachyderm.io

Emelia 👸🏻

CVE number assigned! More news soon.

(It's my first numbered CVE 🥲)

9 February at 23:15 | Open on hachyderm.io

Ian Sorensen

@thisismissem Congratulations!

9 February at 23:25 | Open on defcon.social

Emelia 👸🏻

@Oobleck congratulations somehow doesn't feel right, but getting this fixed absolutely does.

9 February at 23:26 | Open on hachyderm.io

Go Up