Open Security Advisory

[thanosgn]

Hello team,

I have created a Security Advisory since Aug 29 2025.

Can you please have a look?

I did not find any other way to escalate this, so I am creating this issue.

Thanks in advance.

[pkieltyka]

hi @thanosgn you can DM me on twitter @peterk

[angelofallars]

Hey @pkieltyka! Our security platform is also reporting a security issue on Chi. Could this be the same issue? I tried messaging you on Twitter but it seems that your DMs are disabled. Can I email you? Will gladly work on this issue either way

[pkieltyka]

perhaps this GHSA-mqqf-5wvp-8fh8

[thanosgn]

Hi @pkieltyka this is the issue I reported and I am referring to.

@angelofallars has no permission to view it.

This is only visible to your team and me.

[thanosgn]

Happy new year @pkieltyka,

Any updates on this? (I tried to DM you on Twitter but I am not able to)

[pkieltyka]

thanks for following up :) this is now solved in #1044

[thanosgn]

Hello @pkieltyka, can you assign the following CVE id CVE-2025-69725 to GHSA-mqqf-5wvp-8fh8?

https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/publishing-a-repository-security-advisory#requesting-a-cve-identification-number-optional