Skip to content

Add fix references to GHSA-g5r6-gv6m-f5jv#8691

Closed
Samielakkad wants to merge 1 commit into
github:Samielakkad/advisory-improvement-8691from
Samielakkad:codex/ghsa-g5r6-references
Closed

Add fix references to GHSA-g5r6-gv6m-f5jv#8691
Samielakkad wants to merge 1 commit into
github:Samielakkad/advisory-improvement-8691from
Samielakkad:codex/ghsa-g5r6-references

Conversation

@Samielakkad

Copy link
Copy Markdown

Summary

Adds missing primary-source references to GHSA-g5r6-gv6m-f5jv:

  • the upstream commit that confines caller-provided attachment paths to the workspace;
  • the v0.22.0 release notes, which explicitly list this GHSA as fixed.

These links let downstream readers connect the advisory's fixed version to the exact code change and release evidence.

Validation

  • changes one existing advisory only;
  • python -m json.tool passes;
  • both public source URLs were verified against the upstream repository.

@github-actions github-actions Bot changed the base branch from main to Samielakkad/advisory-improvement-8691 July 13, 2026 12:08
@Samielakkad Samielakkad deleted the codex/ghsa-g5r6-references branch July 14, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant