Update GHSA-hf3r-vmrv-7w29.json

[zly123987]

Updates

• References
• Aliases

Comments

• Add a patch commit peteroupc/CBOR@28f308a
• Add an alias to "CVE-2024-21909"

[Copilot]

Pull Request Overview

Updates the withdrawn CBOR advisory by adding a CVE alias and linking to a patch commit.

• Add CVE-2024-21909 to the aliases array.
• Insert a new WEB reference pointing to the patch commit.

Comments suppressed due to low confidence (1)

advisories/github-reviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json:44

• [nitpick] Indentation for this closing brace is inconsistent with other entries; align it with the surrounding array items (6 spaces) to improve readability.

    },

[Copilot]

[nitpick] The summary is vague; consider specifying the exact branch name (e.g., main or release/4.x) so consumers know where to find this patch commit.

Suggested change

	"summary": "This patch commit is on another branch."
	"summary": "This patch commit is on the 'release/4.x' branch."

[shelbyc]

Hi @zly123987, I'm closing the PR because GHSA-hf3r-vmrv-7w29 has been withdrawn as a duplicate. GHSA-6r92-cgxc-r5fg is the appropriate GHSA ID that is attached to CVE-2024-21909.