advisory-database

advisory-database copied to clipboard

Advisory GHSA-f4w8-cv6p-x6r5 lists incorrect fixed version

1

I have noticed an issue with the details provided in the advisory [GHSA-f4w8-cv6p-x6r5](https://github.com/advisories/GHSA-f4w8-cv6p-x6r5) regarding the fixed version. The advisory lists 8.1.1 as the version where the issue is fixed. However,...

shivakumar-loginsoft

Support Haskell ecosystem advisories

2

Hello, I'm a member of the [Haskell Security Response Team](https://haskell.org/security/), we are hosting a [security advisory database](https://github.com/haskell/security-advisories), and we would like to [be supported](https://github.com/haskell/security-advisories/issues/11). We already have the OSV support,...

blackheaven

Advisory GHSA-xffm-g5w8-qvg7 has incorrect fix version

2

The advisory against `@eslint/plugin-kit` ([GHSA-xffm-g5w8-qvg7](https://github.com/advisories/GHSA-xffm-g5w8-qvg7)) has an incorrect fix version. It is marked as affecting versions < 0.3.3, and being patched in the 0.3.3 release, however it wasn't actually patched...

d-ellis