Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Update GHSA-mcrp-whpw-jp68.json for a new patch link #5566

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

zly123987
Copy link

Updates

  • References

Comments

@Copilot Copilot AI review requested due to automatic review settings May 20, 2025 06:15
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the GHSA advisory JSON by adding a new patch commit reference.

  • Added a new commit reference with an accompanying summary field describing the commit’s branch context.
Comments suppressed due to low confidence (1)

advisories/github-reviewed/2025/03/GHSA-mcrp-whpw-jp68/GHSA-mcrp-whpw-jp68.json:50

  • Consider verifying that the addition of the 'summary' field aligns with the GHSA advisory JSON schema and style; if it's required or beneficial for clarity, consider standardizing its use across all commit references.
"summary": "This patch commit is on another branch."

@github-actions github-actions bot changed the base branch from main to zly123987/advisory-improvement-5566 May 20, 2025 06:16
@shelbyc
Copy link
Contributor

shelbyc commented May 20, 2025

Hi @zly123987, thanks for the commit link and correction. invoke-ai/InvokeAI@ed46ace shows that CVE-2024-12029 is fixed in 5.4.3rc2, not 5.4.3rc1, so I changed the VVR and patch to 5.4.3rc2.

@advisory-database advisory-database bot merged commit 35fb319 into github:zly123987/advisory-improvement-5566 May 20, 2025
2 checks passed
@advisory-database
Copy link
Contributor

Hi @zly123987! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants