CVE for DSS spec

Hi Chet, we already discussed the topic soe time ago: The DSS core V1.0 has a vulnerability and we like to file it officially.
Is there an official OASIS process for it?
If not, I would suggest that we add a remark including the link to the explaination & mitigation document and the CVE at a prominent place on the TC home page and at the standards download section.
Gretings, Andreas

--
Andreas KÃhne Chair of OASIS DSS-X phone: +49 177 293 24 97 mailto: 
Trustable Ltd.
Niederlassung Deutschland Gartenheimstr.
39C - 30659 Hannover Amtsgericht Hannover HRB 212612 Director Andreas KÃhne Company UK Company No: 5218868 Registered in England and Wales