Skip to content

Add fix and release references for GHSA-vqff-r82h-9crc - #10412

Open
lastwane2 wants to merge 1 commit into
github:lastwane2/advisory-improvement-10412from
lastwane2:main
Open

lastwane2 wants to merge 1 commit into
github:lastwane2/advisory-improvement-10412from
lastwane2:main

Conversation

@lastwane2

Copy link
Copy Markdown

The advisory identifies 0.4.112 as the patched version but has no fix or release reference. Add the upstream commit and release so readers can inspect the origin-check change and identify the security release.

  • Fix commit: pins the host origin and checks data-bearing messages in src/resources/datastore-table-ui.ts.
  • Release notes: explicitly list the DataStore Table UI origin-check fix. The release tag points to the same commit.

Validation: JSON parses, reference URLs are unique, and all fields outside references are unchanged. No changes to severity or affected versions.

@github-actions
github-actions Bot changed the base branch from main to lastwane2/advisory-improvement-10412 October 17, 2026 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant