Skip to content

[GHSA-mpmc-qchh-r9q8] Altcha Proof-of-Work obfuscation mode cryptanalytic break#6527

Merged
advisory-database[bot] merged 1 commit intoeternal-flame-AD/advisory-improvement-6527from
eternal-flame-AD-GHSA-mpmc-qchh-r9q8
Dec 10, 2025
Merged

[GHSA-mpmc-qchh-r9q8] Altcha Proof-of-Work obfuscation mode cryptanalytic break#6527
advisory-database[bot] merged 1 commit intoeternal-flame-AD/advisory-improvement-6527from
eternal-flame-AD-GHSA-mpmc-qchh-r9q8

Conversation

@eternal-flame-AD
Copy link

Updates

  • Affected products

Comments
Hi, I am the original reporter of this. It seems to be enriched incorrectly (version criteria is inverted). This is currently unpatched and applies to versions AFTER 0.8.0, not before.

Copilot AI review requested due to automatic review settings December 10, 2025 09:16
@github-actions github-actions bot changed the base branch from main to eternal-flame-AD/advisory-improvement-6527 December 10, 2025 09:17
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR corrects the version criteria for security advisory GHSA-mpmc-qchh-r9q8, which describes a cryptanalytic break in Altcha's Proof-of-Work obfuscation mode. The vulnerability was incorrectly specified as affecting versions before 0.8.0, when it actually affects versions from 0.8.0 onwards (currently unpatched).

Key changes:

  • Corrected the affected version range to indicate the vulnerability was introduced in version 0.8.0 rather than affecting all versions up to and including 0.8.0
  • Updated the modification timestamp to reflect this correction

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database advisory-database bot merged commit bb08081 into eternal-flame-AD/advisory-improvement-6527 Dec 10, 2025
10 checks passed
@advisory-database
Copy link
Contributor

Hi @eternal-flame-AD! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database bot deleted the eternal-flame-AD-GHSA-mpmc-qchh-r9q8 branch December 10, 2025 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants