[GHSA-mw8w-q3f7-2v85] Podinfo affected by Arbitrary File Upload that leads to Stored Cross-Site Scripting (XSS)

[stefanprodan]

Updates

• Affected products
• CVSS v3
• CVSS v4

Comments
CVE fixed in https://github.com/stefanprodan/podinfo/releases/tag/6.11.1

[Copilot]

Pull request overview

This PR updates the GHSA advisory record for GHSA-mw8w-q3f7-2v85 (Podinfo arbitrary file upload leading to stored XSS), aiming to reflect updated affected versions and scoring information.

Changes:

• Removes the populated top-level severity entries (CVSS v3.1/v4.0) and replaces them with an empty array.
• Updates the affected range to use a fixed event at 6.11.1 and adds database_specific.last_known_affected_version_range.
• Bumps the modified timestamp.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[stefanprodan]

Removes the populated top-level severity entries (CVSS v3.1/v4.0) and replaces them with an empty array.

This looks like a form submission bug, I only added the version with the fix

[advisory-database]

Hi @stefanprodan! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!