)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"af07c085e9fe303df77ca099cdfedbaa1eb582c2","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"830ad7af_52351a85","updated":"2026-10-20 15:02:17.000000000","message":"recheck\n\nto get a rebuild","commit_id":"5fd043f43abc0f158c4726349396851bad0253e0"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"1dc8d4da9f40a9250662e48defdf664aea9fa0e5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"242ac101_c687168b","updated":"2026-10-20 15:21:49.000000000","message":"LGTM, thank you","commit_id":"443debf48cf0bbf23a6f3c6315719307c78371d9"}],"ossa/OSSA-2026-045.yaml":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"1836c9dec805a5ba1e7d79300276190466fdf150","unresolved":true,"context_lines":[{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Yuliang Xiao, an independent reporter, and Chen YuXiang of the"},{"line_number":9,"context_line":"  Institute of Computing Technology, Chinese Academy of Sciences"},{"line_number":10,"context_line":"  reported a vulnerability in Cinder\u0027s messages API. A non-admin user"},{"line_number":11,"context_line":"  with the project-scoped \u0027member\u0027 or \u0027reader\u0027 role making the Block"},{"line_number":12,"context_line":"  Storage API v3.3 \"List messages\" call finds the non-expired user"},{"line_number":13,"context_line":"  messages for other projects included in the response, resulting in"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"404df0e8_8680ed8c","line":10,"range":{"start_line":10,"start_character":2,"end_line":10,"end_character":10},"updated":"2026-10-20 14:49:17.000000000","message":"independently reported","commit_id":"5fd043f43abc0f158c4726349396851bad0253e0"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"4b5e8c8ac57b5e1b56e6124d4b3b7e21ab33c885","unresolved":false,"context_lines":[{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Yuliang Xiao, an independent reporter, and Chen YuXiang of the"},{"line_number":9,"context_line":"  Institute of Computing Technology, Chinese Academy of Sciences"},{"line_number":10,"context_line":"  reported a vulnerability in Cinder\u0027s messages API. A non-admin user"},{"line_number":11,"context_line":"  with the project-scoped \u0027member\u0027 or \u0027reader\u0027 role making the Block"},{"line_number":12,"context_line":"  Storage API v3.3 \"List messages\" call finds the non-expired user"},{"line_number":13,"context_line":"  messages for other projects included in the response, resulting in"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"33f31bbe_c96c967a","line":10,"range":{"start_line":10,"start_character":2,"end_line":10,"end_character":10},"in_reply_to":"404df0e8_8680ed8c","updated":"2026-10-20 15:17:54.000000000","message":"Done","commit_id":"5fd043f43abc0f158c4726349396851bad0253e0"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"6fe7becd2cd4d70a10dd4680fe52610aed6c2068","unresolved":false,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":"reporters:"},{"line_number":27,"context_line":"  - name: Yuliang Xiao"},{"line_number":28,"context_line":"    affiliation: Independent"},{"line_number":29,"context_line":"  - name: Chen YuXiang"},{"line_number":30,"context_line":"    affiliation: Institute of Computing Technology, Chinese Academy of Sciences"},{"line_number":31,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"68fbda42_c18eb414","line":28,"updated":"2026-10-20 14:35:33.000000000","message":"Nit: For future reference, if there is no declared affiliation it\u0027s cleaner to just leave this entry out entirely. The field is optional and our advisory renderer already does the right thing in such cases. Putting a literal \"Independent\" here results in the credit rendering as \"Yuliang Xiao from Independent\" in the advisory itself.","commit_id":"5fd043f43abc0f158c4726349396851bad0253e0"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"1836c9dec805a5ba1e7d79300276190466fdf150","unresolved":true,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":"reporters:"},{"line_number":27,"context_line":"  - name: Yuliang Xiao"},{"line_number":28,"context_line":"    affiliation: Independent"},{"line_number":29,"context_line":"  - name: Chen YuXiang"},{"line_number":30,"context_line":"    affiliation: Institute of Computing Technology, Chinese Academy of Sciences"},{"line_number":31,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"e0491016_df39444f","line":28,"updated":"2026-10-20 14:49:17.000000000","message":"both need the \"reported\" field:\n\nreported: - CVE-2026-93856","commit_id":"5fd043f43abc0f158c4726349396851bad0253e0"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"4b5e8c8ac57b5e1b56e6124d4b3b7e21ab33c885","unresolved":false,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":"reporters:"},{"line_number":27,"context_line":"  - name: Yuliang Xiao"},{"line_number":28,"context_line":"    affiliation: Independent"},{"line_number":29,"context_line":"  - name: Chen YuXiang"},{"line_number":30,"context_line":"    affiliation: Institute of Computing Technology, Chinese Academy of Sciences"},{"line_number":31,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"184e45c1_4da42d6a","line":28,"in_reply_to":"e0491016_df39444f","updated":"2026-10-20 15:17:54.000000000","message":"Done","commit_id":"5fd043f43abc0f158c4726349396851bad0253e0"}]}