No subject

[Paul Spooren]

Hi Qiulin Deng,

Thanks again for your efforts to make OpenWrt more secure.

I enabled advisory reporting for packages.git on GitHub, please create the two advsories there. Please allow us some time to evaluate the repots, as you can imagine we're receiving more and more AI generated reports, which take time to evaluate.

When writing emails, please provide content as text and images only, please refrain from attaching large docx or PDF files.

Due to limited Internet access and travel, I can’t perform extensive testing myself, however kindly ask you to provide working PoCs to proof the exploit, allowing other OpenWrt members to verify things quickly.

Best,
Paul


> On 29. Apr 2026, at 21:42, 霖 <3244386459 at qq.com> wrote:
> 
> Dear OpenWrt Security Team,
> 
> I hope this message finds you well. I am writing to follow up on my previous submissions regarding security vulnerabilities in luci-app-lxc and luci-app-openvpn, which I submitted to contact at openwrt.org
> from my university email 2112433150 at e.gzhu.edu.cn
> on April 25 and April 27, respectively.
> 
> On April 26, I received a response requesting my GitHub account and a GitHub submission. However, the provided link did not offer an upload location. I followed up with another email on April 27 with the detailed report, but I have not yet received a response.
> 
> Given the critical nature of these vulnerabilities, I would appreciate it if you could provide an update on the status of my reports. I understand the challenges of monitoring this mailbox, but I kindly request your attention to these matters, especially considering the potential impact.
> 
> If you require additional information or clarification, I am more than happy to assist. For reference, my GitHub account is FallR, and I can be reached there for any follow-up. I am now submitting this follow-up using my QQ email address for your convenience.
> 
> Thank you for your attention to this matter, and I look forward to your response at your earliest convenience.
> 
> Best regards,
> Qiulin Deng
> 
> 
> 霖
> 3244386459 at qq.com
> _______________________________________________
> openwrt-adm mailing list
> openwrt-adm at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-adm