CVE-2025-65849

[SebastianPoell]

Hi there, love your work!

Since GH dependabot, JS audits and linters complain for a couple of days now, I wonder whether you have this on your radar?
https://www.cve.org/CVERecord?id=CVE-2025-65849

[ovx]

Hi, this is an incorrectly filed report, I already filed a dispute / rejection.

The copy of the dispute and rationale is posted also here: github/advisory-database#6536

[SebastianPoell]

Perfect, thank you!

[ovx]

Mitigated in v2.3.0, see migration guide if you use the plugins (no migration needed if you don't use plugins):

https://github.com/altcha-org/altcha/blob/main/MIGRATION-v2.3.0.md