[aungzayyanaing]

Updates

• References

Comments
Add the official Citizen v3.3.1 release reference. The release notes name CVE-2025-49578 and describe the stored XSS system-message fix (93c36ac); the advisory is fixed in 3.3.1. Reference-only change; no other advisory fields were changed.

[github]

Hi there @alistair3149! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

🟢 Approval recommended

The advisory now includes the official Citizen v3.3.1 release reference and updated modification timestamp, with no active review issues identified.

No open issues 🎉

What changed in this PR

Adds the official Citizen v3.3.1 release reference to the existing GHSA advisory for the stored XSS vulnerability, improving traceability while preserving the existing vulnerability metadata.

Changes:

• Updates the advisory modification timestamp.
• Adds the Citizen v3.3.1 GitHub release URL as a web reference.

File	Description
advisories/​github-reviewed/​2025/​06/​GHSA-2v3v-3whp-953h/​GHSA-2v3v-3whp-953h.json	Adds the official Citizen v3.3.1 release reference and updates the advisory modification timestamp.

_{Review effort: Lite (dynamic)}