From 0a5a17ea34c3f79d95fa09bc06468cf77a44b449 Mon Sep 17 00:00:00 2001 From: hahwul Date: Wed, 29 Jul 2026 20:10:03 +0900 Subject: [PATCH 1/2] [GHSA-x3f8-2w95-hw4m] Add affected package --- .../GHSA-x3f8-2w95-hw4m.json | 22 ++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json b/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json index b12a8c9c77dac..23c0f59311fc6 100644 --- a/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json +++ b/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json @@ -17,7 +17,27 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "changedetection-io" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.54.7" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", From 3ca4aa4af434199988077d854a9e84b37b0233d6 Mon Sep 17 00:00:00 2001 From: hahwul Date: Wed, 29 Jul 2026 20:15:53 +0900 Subject: [PATCH 2/2] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .../2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json b/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json index 23c0f59311fc6..05deded24fb99 100644 --- a/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json +++ b/advisories/unreviewed/2026/04/GHSA-x3f8-2w95-hw4m/GHSA-x3f8-2w95-hw4m.json @@ -21,7 +21,7 @@ { "package": { "ecosystem": "PyPI", - "name": "changedetection-io" + "name": "changedetection.io" }, "ranges": [ {