CVE-2025-67125 reported upstream?

[carnil]

Hi

Apparently there was CVE-2025-67125 assigned for https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd but it was not clear for me if it was reported upstream.

Regards,
Salvatore

[thesmartshadow]

Hi, @carnil

I opened a PR with a proposed fix for this vulnerability:
#168

It guards the counter merge in LeafPattern::match to prevent the signed overflow behind CVE-2025-67125.

Thanks,
Ali Firas