Skip to content

[GHSA-78fc-9688-w8xw] Fix malformed CVSS 4 vector - #8819

Open
mohammadrezwankhan wants to merge 1 commit into
github:mohammadrezwankhan/advisory-improvement-8819from
mohammadrezwankhan:codex/fix-ghsa-78fc-cvss4-vector
Open

mohammadrezwankhan wants to merge 1 commit into
github:mohammadrezwankhan/advisory-improvement-8819from
mohammadrezwankhan:codex/fix-ghsa-78fc-cvss4-vector

Conversation

@mohammadrezwankhan

@mohammadrezwankhan mohammadrezwankhan commented Jul 26, 2026 •

Copy link
Copy Markdown

What changed

Removed the extra trailing slash from the CVSS 4.0 vector in GHSA-78fc-9688-w8xw.

Why

The trailing slash creates an empty metric segment and leaves the stored CVSS 4.0 vector malformed. This focused correction addresses:

Impact

Consumers of the advisory receive a syntactically valid machine-readable CVSS 4.0 vector without any change to the advisory's metrics or assessed score.

Validation

  • Parsed the updated advisory as JSON.
  • Confirmed the advisory ID remains GHSA-78fc-9688-w8xw.
  • Confirmed the CVSS 4.0 vector no longer ends with /.
  • Confirmed the commit changes only this advisory file and only the final slash.

Closes #7882

@github-actions
github-actions Bot changed the base branch from main to mohammadrezwankhan/advisory-improvement-8819 July 26, 2026 08:51
@mohammadrezwankhan
mohammadrezwankhan marked this pull request as ready for review July 26, 2026 08:52
Copilot AI review requested due to automatic review settings July 26, 2026 08:52

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@mohammadrezwankhan

Copy link
Copy Markdown
Author

Hi maintainers, just gently bumping this PR. Please let me know if any additional changes or validations are needed from my side to help get this merged. Thanks!

@github-actions

Copy link
Copy Markdown

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

@github-actions github-actions Bot added the Stale label Oct 31, 2026
@mohammadrezwankhan

Copy link
Copy Markdown
Author

Hi maintainers, this correction is still ready for review. It removes only the trailing slash from the CVSS 4.0 vector for GHSA-78fc-9688-w8xw, without changing its metrics or assessed score. Validation details are included in the PR description.

Could the GitHub Advisory Curation team please review it for publication? Following the stale warning, could you also consider adding the Keep label while it awaits review? Please let me know if any further validation is needed. Thank you!

@github-actions github-actions Bot removed the Stale label Nov 1, 2026
@ancieg

ancieg commented Nov 5, 2026

Copy link
Copy Markdown

I also encountered that error but with few another records. Here is log from our loader:

{
    "task": "ghsa_update_task",
    "timestamp": "2026-11-04T16:30:56.596267",
    "result": "done",
    "ghsa_count": 78,
    "errors": [
        "GHSA-78fc-9688-w8xw: Malformed CVSS4 vector, trailing \"/\"",
        "GHSA-365w-hqf6-vxfg: Malformed CVSS4 vector, trailing \"/\"",
        "GHSA-g357-x5c3-c72p: Malformed CVSS4 vector, trailing \"/\"",
        "GHSA-9p7c-v5x3-rfx8: Malformed CVSS4 vector, trailing \"/\""
    ]
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants