Godot 4.x: heap out-of-bounds read in OptimizedTranslation receives disputed CVE

Update to a post on the oss-sec feed, dated October 15, 2026, describing a heap out-of-bounds read in message lookup for OptimizedTranslation in Godot 4.x. CVE-2026-110736 was assigned. The record is marked disputed, and its description cites the vendor position that there are no security issues. MITRE assigned the score CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L, which is 3.6. The author requested reconsideration from MITRE's last-resort CVE numbering authority (CNA-LR); the available text is truncated and reports no outcome. To verify, consult the original post on the oss-sec list and the CVE record by its identifier, checking the current status. The relevance lies in the conflict between a low severity score and the dispute over impact, which shows that classification depends on who interprets it. Rota Nacional does not analyze, fix or validate this vulnerability. Privacy is secondary here: if your team uses AI to study the advisory, do not send proprietary code, logs or personal data unless necessary.