[GHSA-2g7m-ph9x-7q7m] ReDoS in strip_whitespaces() function in cps... #5856
Conversation
There was a problem hiding this comment.
Pull Request Overview
Updates a security advisory for a ReDoS vulnerability affecting both Calibre Web and Autocaliweb packages by adding comprehensive metadata including affected products, CVSS v4 scoring, and vulnerability summary details.
- Added summary and detailed description of the ReDoS vulnerability in strip_whitespaces() function
- Updated CVSS v4 score to a more precise format
- Added affected packages section with version ranges for both calibreweb and autocaliweb
| "introduced": "0" | ||
| }, | ||
| { | ||
| "fixed": ">= 0.7.1" |
There was a problem hiding this comment.
The 'fixed' field syntax '>= 0.7.1' is invalid for this ecosystem. It should be '0.7.1' without the comparison operator, as the OSV schema expects exact version strings for the 'fixed' event type.
| "fixed": ">= 0.7.1" | |
| "fixed": "0.7.1" |
Copilot uses AI. Check for mistakes.
github-actions
bot
changed the base branch from
main
to
gelbphoenix/advisory-improvement-5856
|
Hi @gelbphoenix, thank you for your contribution. I am unable to add |
advisory-database
bot
merged commit e0dbd4d
into
gelbphoenix/advisory-improvement-5856
|
Hi @gelbphoenix! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future! |
Updates
Comments
The same as with GHSA-qc4j-v7h6-xr5h. Added Autocaliweb to be open about this vulnerablility despite it not being on PyPI. ~gelbphoenix