[GHSA-crh6-fp67-6883] xmldom allows multiple root nodes in a DOM

[karfau]

Updates

• Affected products

Comments
Update "patched version" ranges to include newer patch versions

[github]

Hi there @karfau! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our highly-trained Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[shelbyc]

Hi @karfau, following up from yesterday, my response to this is the same as my initial response in #808 -- We can't use ranges in the Patched versions section because it only supports values that contain characters and punctuation (., -) commonly used in version IDs. Putting >= or ~ in Patched Versions results in an error message.

If GHSA-crh6-fp67-6883 needs any other changes, you're welcome to commit them here. Otherwise, I can close the PR.