Capability drift in xmap/cora

This advisory has been withdrawn. It was published automatically on code-analysis evidence that the analyzer graded below high severity — a secret in a test fixture, a static-argument vm call, or a similar demoted finding. The claim below should not have been made about xmap/cora, and it no longer counts toward that server's risk grade or appears in any feed.

withdrawn 09-09 12:45 · the original text is kept below so the correction is checkable