Repository navigation
[GHSA-78fc-9688-w8xw] Fix malformed CVSS 4 vector - #8819
mohammadrezwankhan wants to merge 1 commit into
Conversation
|
Hi maintainers, just gently bumping this PR. Please let me know if any additional changes or validations are needed from my side to help get this merged. Thanks! |
|
👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the |
|
Hi maintainers, this correction is still ready for review. It removes only the trailing slash from the CVSS 4.0 vector for GHSA-78fc-9688-w8xw, without changing its metrics or assessed score. Validation details are included in the PR description. Could the GitHub Advisory Curation team please review it for publication? Following the stale warning, could you also consider adding the Keep label while it awaits review? Please let me know if any further validation is needed. Thank you! |
|
I also encountered that error but with few another records. Here is log from our loader: |
What changed
Removed the extra trailing slash from the CVSS 4.0 vector in
GHSA-78fc-9688-w8xw.Why
The trailing slash creates an empty metric segment and leaves the stored CVSS 4.0 vector malformed. This focused correction addresses:
Impact
Consumers of the advisory receive a syntactically valid machine-readable CVSS 4.0 vector without any change to the advisory's metrics or assessed score.
Validation
GHSA-78fc-9688-w8xw./.Closes #7882