From df302fb34893117213fe5924d35caf4c2b1f08b0 Mon Sep 17 00:00:00 2001 From: Ankush Pathak Date: Tue, 26 May 2026 20:29:09 +0530 Subject: [PATCH 1/2] Improve GHSA-8rm2-7qqf-34qm --- .../GHSA-8rm2-7qqf-34qm.json | 21 ++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json b/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json index 7c4b75803d752..4c7bf08bb642d 100644 --- a/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json +++ b/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8rm2-7qqf-34qm", - "modified": "2026-05-05T19:34:05Z", + "modified": "2026-05-05T19:34:06Z", "published": "2026-05-05T19:34:05Z", "aliases": [ "CVE-2026-42154" @@ -33,6 +33,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/prometheus/prometheus" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.305.3" + } + ] + } + ] } ], "references": [ From 967b8f070161ae2b9b829deff1903179dbeb744d Mon Sep 17 00:00:00 2001 From: Ankush Pathak Date: Tue, 26 May 2026 21:14:11 +0530 Subject: [PATCH 2/2] Improve GHSA-8rm2-7qqf-34qm --- .../2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json b/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json index 4c7bf08bb642d..c98d1b1a388b4 100644 --- a/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json +++ b/advisories/github-reviewed/2026/05/GHSA-8rm2-7qqf-34qm/GHSA-8rm2-7qqf-34qm.json @@ -25,7 +25,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "0.306.0" }, { "fixed": "0.311.3"