Skip to content

Add patch commit and release reference to GHSA-62hf-57xw-28j9#7897

Merged
advisory-database[bot] merged 4 commits into
github:0bi0/advisory-improvement-7897from
0bi0:main
Jun 8, 2026
Merged

Add patch commit and release reference to GHSA-62hf-57xw-28j9#7897
advisory-database[bot] merged 4 commits into
github:0bi0/advisory-improvement-7897from
0bi0:main

Conversation

@0bi0

@0bi0 0bi0 commented Jun 5, 2026

Copy link
Copy Markdown

The advisory for CVE-2026-42039 (axios unbounded recursion in toFormData) is missing a reference to the fixing commit and the release that shipped the patch.

Added to references:

Copilot AI review requested due to automatic review settings June 5, 2026 07:56

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds additional upstream reference links to two GitHub-reviewed advisories to improve traceability of fixes and releases.

Changes:

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
advisories/github-reviewed/2026/05/GHSA-62hf-57xw-28j9/GHSA-62hf-57xw-28j9.json Adds upstream Axios commit + release references to the advisory metadata.
advisories/github-reviewed/2026/05/GHSA-29h4-r29x-hchv/GHSA-29h4-r29x-hchv.json Adds upstream fix commit reference to the advisory metadata.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions github-actions Bot changed the base branch from main to 0bi0/advisory-improvement-7897 June 5, 2026 07:57
@0bi0 0bi0 requested a review from Copilot June 5, 2026 08:38

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

@advisory-database advisory-database Bot merged commit 412d616 into github:0bi0/advisory-improvement-7897 Jun 8, 2026
1 check passed
@advisory-database

Copy link
Copy Markdown
Contributor

Hi @0bi0! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants