I have noticed an issue with the details provided in the advisory GHSA-jh5w-6964-x5cf regarding the fixed version.

The advisory lists 2.26.1 as the version where the issue is fixed but has no appropriate fix. However, the vulnerability seems to be fixed in version 2.25.2 (commit reference, issue reference)

Could you please review and update the advisory to reflect the correct information? Thank you.