[GHSA-f29h-pxvx-f335] eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7... #5838
Conversation
There was a problem hiding this comment.
Pull Request Overview
This PR updates a GitHub security advisory (GHSA-f29h-pxvx-f335) for eslint-config-prettier to add missing package information and vulnerability details. The advisory addresses a supply chain compromise affecting specific versions of the eslint-config-prettier npm package.
- Adds summary field describing the malicious code vulnerability
- Populates the affected packages array with vulnerable versions (8.10.1, 9.1.1, 10.1.6-10.1.7)
- Updates the modification timestamp
| "8.10.1" | ||
| ] | ||
| }, | ||
| { | ||
| "package": { | ||
| "ecosystem": "npm", | ||
| "name": "eslint-config-prettier" | ||
| }, | ||
| "versions": [ |
There was a problem hiding this comment.
[nitpick] Consider consolidating the package entries for eslint-config-prettier. Having separate objects for versions 8.10.1 and 9.1.1 when they could be combined into a single package entry with multiple versions or ranges would improve maintainability.
| "8.10.1" | |
| ] | |
| }, | |
| { | |
| "package": { | |
| "ecosystem": "npm", | |
| "name": "eslint-config-prettier" | |
| }, | |
| "versions": [ | |
| "8.10.1", |
Copilot uses AI. Check for mistakes.
a15ea92
into
Pradoxzon/advisory-improvement-5838
|
Hi @Pradoxzon! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future! |
Updates
Comments
Adding package and vulnerable versions.