<div dir="ltr"><div><br clear="all"></div><div><div dir="ltr"><div><div dir="ltr"><div><p style="font-size:13px;font-variant:normal;margin:0px;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:normal;font-family:"Helvetica Neue"">Greetings MobilityDB Security Team,</p><p style="font-size:13px;font-variant:normal;margin:0px;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:normal;font-family:"Helvetica Neue""><br></p><p style="font-size:13px;font-variant:normal;margin:0px;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;line-height:normal;font-family:"Helvetica Neue"">I'm a vulnerability analyst at <a href="https://www.vulncheck.com/" target="_blank">VulnCheck</a> an exploit intelligence company and research CVE Numbering Authority (CNA), where I'm one of several folks who manage our coordinated vulnerability disclosure (CVD) program.<br><br>An external security researcher recently <a href="https://www.vulncheck.com/advisories/report" target="_blank">reported</a> a potential vulnerability impacting [<a href="https://github.com/MobilityDB/MobilityDB">MobilityDB / MobilityDB</a>] and VulnCheck is acting as the intermediary and coordinator.<br><br>VulnCheck follows a <a href="https://www.vulncheck.com/vulnerability-disclosure-policy" target="_blank">120-day disclosure policy</a>, meaning we afford vendors/maintainers up to 120 days from the time of receiving the report to address the issue before publication of a CVE record and third-party advisory. For this vulnerability, the 120-day deadline is <b style="font-family:Arial,Helvetica,sans-serif;font-size:small">January 26, 2027 (26/01/2027)</b>. Of note, patch publication constitutes public disclosure — if a patch is issued, we will publish the CVE record at that time rather than waiting for the full 120-day window.<br><br>The researcher has provided us with a comprehensive technical report, which we have attached to this email. Let us know if you have any questions for us about the CVD process or for the researcher regarding the reported vulnerability.</p></div></div></div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"></div></div></div></div></div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div style="color:rgb(34,34,34)"><span style="background-color:transparent">Thank you,</span></div><div style="color:rgb(34,34,34)"><span style="background-color:transparent"><br></span></div><div style="color:rgb(34,34,34)"><div dir="ltr"><div dir="ltr"><table style="border-width:medium;border-style:none;border-color:currentcolor;border-collapse:collapse"><tbody><tr><td style="border-width:1pt;border-style:solid;border-color:rgb(255,255,255);vertical-align:top;padding:5pt;overflow:hidden"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline"><span style="border-width:medium;border-style:none;border-color:currentcolor;display:inline-block;overflow:hidden;width:49px;height:49px"><a href="https://www.vulncheck.com/" style="color:rgb(17,85,204)" target="_blank"><img src="https://lh7-us.googleusercontent.com/-9dCGnQIZaW0ehyK1B0bqLmef7d7ZWuSmmmWUYJGhzNgtzRhqFPZrtO3AnQt8PETFHiv6_YST3DacZVgrxPdAYXErAMnJrF6Isn27caszruLjby7jLRuuU__5emkqFjU8hczQ307--yVVMpVSiK7Qg" width="49" height="49" style="margin-left:0px;margin-top:0px"></a></span></span></p></td><td style="border-width:1pt;border-style:solid;border-color:rgb(255,255,255);vertical-align:top;padding:5pt;overflow:hidden"><p dir="ltr" style="color:rgb(32,33,36);line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgba(0,0,0,0.847);font-family:-apple-system-font;font-size:12px">Brandon Tarr</span></p><div style="color:rgba(0,0,0,0.847);font-family:-apple-system-font;font-size:12px">VulnCheck</div></td></tr></tbody></table></div></div></div></div></div></div>