Hi there @emilevauge! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

Hi @prabhu,
We accidentally closed this PR in error, but please be assured we are still actively reviewing this issue. We will be sure to inform you when we have more information!

Hi @prabhu, GHSA-6v2p-p543-phr9 has been published so that golang.org/x/oauth2, the package in which CVE-2025-22868 originates, has its own advisory separate from Traefik's advisory about how CVE-2025-22868 affects their product. Thanks for raising golang.org/x/oauth2 to us and have a great weekend!