From fb27ce46df0e83f48fe22d695fef8d18c48f6594 Mon Sep 17 00:00:00 2001 From: uniabis <47619988+uniabis@users.noreply.github.com> Date: Fri, 1 May 2026 13:17:20 +0900 Subject: [PATCH] Improve GHSA-w5hq-g745-h8pq --- .../GHSA-w5hq-g745-h8pq.json | 48 ++++++++++++++++++- 1 file changed, 46 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/04/GHSA-w5hq-g745-h8pq/GHSA-w5hq-g745-h8pq.json b/advisories/github-reviewed/2026/04/GHSA-w5hq-g745-h8pq/GHSA-w5hq-g745-h8pq.json index 174fde063d763..8890046b4dad7 100644 --- a/advisories/github-reviewed/2026/04/GHSA-w5hq-g745-h8pq/GHSA-w5hq-g745-h8pq.json +++ b/advisories/github-reviewed/2026/04/GHSA-w5hq-g745-h8pq/GHSA-w5hq-g745-h8pq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w5hq-g745-h8pq", - "modified": "2026-04-22T20:53:24Z", + "modified": "2026-04-22T20:53:25Z", "published": "2026-04-22T20:53:24Z", "aliases": [], "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", @@ -26,11 +26,55 @@ "introduced": "0" }, { - "fixed": "14.0.0" + "fixed": "11.1.1" } ] } ] + }, + { + "package": { + "ecosystem": "npm", + "name": "uuid" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "12.0.0" + }, + { + "fixed": "12.0.1" + } + ] + } + ], + "versions": [ + "12.0.0" + ] + }, + { + "package": { + "ecosystem": "npm", + "name": "uuid" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "13.0.0" + }, + { + "fixed": "13.0.1" + } + ] + } + ], + "versions": [ + "13.0.0" + ] } ], "references": [