Repository navigation
[GHSA-g357-x5c3-c72p] LiquidJS: pop filter bypasses memoryLimit accounting that its array-filter siblings enforce - #10303
Conversation
|
Hi there @harttle! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository. This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory |
There was a problem hiding this comment.
🟢 Approval recommended
The corrected vector is valid and matches the stated purpose.
0 open findings
What changed in this PR
Corrects CVSS v4 validation for the LiquidJS advisory.
Changes:
- Removes the invalid trailing slash from the CVSS v4 vector.
- Updates the advisory’s modification timestamp.
| File | Description |
|---|---|
GHSA-g357-x5c3-c72p.json |
Corrects the CVSS v4 score format. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Updates
Comments
Fix CVSS v4 validation.