Add credits section to GHSA-m35w-xx8c-6xc7.json

[lirantal]

Inline with Open Source Vulnerability format and as supported in version 1.4.0 - adding credits field per original disclosure report and references provided in this CVE

From the referenced source: https://lists.apache.org/thread/6tswlphj0pqn9zf25594r3c1vzvfj40h

Credit:
Liran Tal, (liran@lirantal.com) (finder)

[Copilot]

Pull Request Overview

This pull request adds credit attribution to a GitHub security advisory by including the finder's contact information and removing a trailing pipe character formatting issue.

Key Changes:

• Added a credits array with finder attribution for Liran Tal
• Fixed JSON formatting by removing an erroneous trailing pipe character

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[shelbyc]

👋 Hi @lirantal, I can't add finder credit for global GHSAs. That privilege is reserved for authors of repository GHSAs, and GHSA-m35w-xx8c-6xc7 isn't sourced from a repo GHSA. But I'm adding https://security.snyk.io/vuln/SNYK-PYTHON-DORISMCPSERVER-13835132 as a reference (and adding the fix commit apache/doris-mcp-server@5923cc1 at the same time) to provide another resource that discusses your work on CVE-2025-58337 and names you as the finder. That way, you'll get a type of credit on the advisory with more resources available for readers to learn more about your work.

[advisory-database]

Hi @lirantal! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!