{
  "cve": "CVE-2026-108707",
  "repository": "https://github.com/AnkesKasty/cve-request-poc",
  "proposedPlan": "Acquire https://github.com/AnkesKasty/cve-request-poc at the exact affected and fixed revisions identified by the advisory. Build only inside an ephemeral, network-isolated VM. Run a minimal synthetic assertion for the behavior described by CVE-2026-108707, then repeat the identical assertion against the fixed revision. Do not claim reproduction unless the vulnerable result is observed and the evidence bundle records versions, commands, output, and teardown.",
  "isolation": "QEMU/KVM VM; no NIC; no host mounts; 256 MiB; 1 vCPU; 60 second limit",
  "assessment": "source-change preflight only; never sufficient for a reproduced-locally label; isolated preflight completed",
  "commit": "https://github.com/AnkesKasty/cve-request-poc/commit/a7b6d1423555812d8efa26c91c5d0683164b31e5",
  "createdAt": "2026-10-17T03:03:21.336Z"
}