Clarify "Patched versions" for GHSA-3hxg-fxwm-8gf7 #1932

abscondment started this conversation in General

abscondment
Nov 13, 2024

Looking at CVE-2024-51501:

https://nvd.nist.gov/vuln/detail/CVE-2024-51501 says 7.2.22 and 8.0.0 contain a fix.
https://github.com/reactiveui/refit/releases/tag/7.2.22 indicates that it contains a fix
this version of https://github.com/reactiveui/refit/security/advisories/GHSA-3hxg-fxwm-8gf7 indicates that only 8.0.0 contains a fix.
- GHSA-3hxg-fxwm-8gf7 correctly starts the fix at 7.2.22

Can we update all versions of the Github Advisory to match?

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment