Re: Re: Are sonatype-2025-002050 and sonatype-2025-002284 planned for a fix?

Dawid Weiss <[email protected]> Fri, 12 Sep 2025 21:53:32 +0200

Newsgroups	gmane.comp.jakarta.lucene.user
Message-ID	<CAM21Rt8yfAsaBAoPCYeLGu8HQYg6S1S6f8=GCwj-0Bb2voo-Hg@mail.gmail.com>

> Thank you David for taking the time to answer, please find below public
> links to those Sonatype.
> I hope it helps.
> sonatype-2025-002050: https://issues.oss-fuzz.com/issues/403330010
> sonatype-2025-002284: https://issues.oss-fuzz.com/issues/407477665

Thanks but it doesn't help at all - that was my point. These are just
some automated randomized injection tests that
nobody followed up on. I'm surprised Sonatype flags these as vulnerabilities.

Dawid