Threats tagged 'ghsa-jhwv-p2mf-f4x9'

An incomplete comparison vulnerability (CWE-1023) exists in the merge_chats() function of the whatstk library versions from 0.3.0 before 0.9.0. This flaw causes messages to be silently omitted from merged chat outputs when their timestamps overlap, as the merge logic discards messages from one chat if their dates fall within the range of the other chat. The merged result does not indicate any removals, potentially impacting forensic reviews or training data generation that rely on complete chat exports.