Skip to content

Add fix references to GHSA-g5r6-gv6m-f5jv#8706

Open
Samielakkad wants to merge 1 commit into
github:Samielakkad/advisory-improvement-8691from
Samielakkad:fix/ghsa-g5r6-references
Open

Add fix references to GHSA-g5r6-gv6m-f5jv#8706
Samielakkad wants to merge 1 commit into
github:Samielakkad/advisory-improvement-8691from
Samielakkad:fix/ghsa-g5r6-references

Conversation

@Samielakkad

Copy link
Copy Markdown

Summary

Adds missing primary-source references to GHSA-g5r6-gv6m-f5jv:

  • the upstream commit that confines caller-provided attachment paths to the workspace;
  • the v0.22.0 release notes, which explicitly list this GHSA as fixed.

These links let downstream readers connect the advisory's fixed version to the exact code change and release evidence.

Validation

  • changes one existing advisory only;
  • python -m json.tool passes;
  • both public source URLs were verified against the upstream repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant