Skip to content

fix: initial range for GHSA-wqch-xfxh-vrr4 - #6470

Merged
advisory-database[bot] merged 1 commit into
github:UlisesGascon/advisory-improvement-6470from
UlisesGascon:UlisesGascon-patch-1
Nov 25, 2025
Merged

fix: initial range for GHSA-wqch-xfxh-vrr4#6470
advisory-database[bot] merged 1 commit into
github:UlisesGascon/advisory-improvement-6470from
UlisesGascon:UlisesGascon-patch-1

Conversation

@UlisesGascon

Copy link
Copy Markdown

Ref:

CopilotAI review requested due to automatic review settings November 25, 2025 17:35
@github-actions
github-actionsBot changed the base branch from main to UlisesGascon/advisory-improvement-6470November 25, 2025 17:36

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR corrects the affected version range for security advisory GHSA-wqch-xfxh-vrr4, which addresses a denial of service vulnerability in the body-parser npm package. The vulnerability only affects version 2.2.0, not all versions from 0 onwards as originally stated.

Key changes:

  • Updated the "introduced" version from "0" to "2.2.0" to accurately reflect that the vulnerability was introduced in v2.2.0
  • Added an explicit "versions" array listing "2.2.0" as the only affected version

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database
advisory-databaseBot merged commit f571f3a into github:UlisesGascon/advisory-improvement-6470Nov 25, 2025
1 check passed
@advisory-database

Copy link
Copy Markdown
Contributor

Hi @UlisesGascon! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@UlisesGascon@jonchurch@bjohansebas