[GHSA-h64w-w9pr-82m4] ExifReader is vulnerable to denial of service via crafted ICC mluc tag

[yuki-matsuhashi]

Updates

• Resources
• References

Comments

Update an advisory reference entry in metadata by removing a link to material that is no longer available.

The referenced material was created by the reporter in accordance with a third-party OSS vulnerability reporting process. It was intended by the reporter to be temporary and has since been deleted.

No advisory body text is changed.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[advisory-database]

Hi @yuki-matsuhashi! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

[shelbyc]

Hi @yuki-matsuhashi, the GitHub Gists have been removed from the reference links of the global advisories of GHSA-h64w-w9pr-82m4 and GHSA-rr89-w3h9-m66j. GitHub doesn't have any control over the repo advisories GHSA-h64w-w9pr-82m4 and GHSA-rr89-w3h9-m66j, so you will need to contact the maintainer if you want the gist removed from the repo advisories. Snyk has control over the CVE records for CVE-2026-8813 and CVE-2026-8814, so you will need to contact Snyk if you want to change the CVE records.

I have a question: Why were the gists only temporary, and why remove them from the advisories?