Improve GHSA-h436-432x-8fvx #2855
Conversation
|
@darakian Wondering if there's anything further I need to do here? |
045f0ce
into
github:wtwhite/advisory-improvement-2855
|
Hi @wtwhite! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future! |
|
Thanks for merging this (I guess this was you @darakian?), but I noticed that the advisory page hasn't actually updated with the new affected product or the new references (though my username now appears in the credits, so something "got through"). Any ideas? For comparison I think the advisory pages for previous merged PRs (#2826, #2827) updated right away. |
|
It was indeed :) |
|
Thanks @darakian, it's there for me now 👍 |
Updates
Comments
Several other components are also affected as a result of cloning (copying source code) or shading (copying source code and renaming packages). Proof-of-Vulnerability projects with tests to verify the presence of the CVE can be found here: https://github.com/jensdietrich/xshady-release/.
See #2258, especially #2258 (comment), for more details.