Skip to content

Add Deno checkPrime advisory references#8271

Open
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8271from
cookesan:deno-9xg4-fix-reference
Open

Add Deno checkPrime advisory references#8271
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8271from
cookesan:deno-9xg4-fix-reference

Conversation

@cookesan

@cookesan cookesan commented Jun 29, 2026

Copy link
Copy Markdown

Adds Deno checkPrime advisory references to GHSA-9xg4-qhm4-g43w.

Audit refresh, July 8, 2026:

  • Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
  • Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-9xg4-qhm4-g43w/GHSA-9xg4-qhm4-g43w.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
  • Revalidated the added public references in the diff; the GitHub commit and release resolve directly, and the NVD CVE page was manually verified after the automated fetch timed out.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8271 June 29, 2026 10:44
@cookesan

cookesan commented Jul 7, 2026

Copy link
Copy Markdown
Author

Rechecked this reference-only PR while keeping the open Advisory Database queue current.

Adds direct NVD, commit, and release references for GHSA-9xg4-qhm4-g43w. The advisory already references upstream PR #34391 and package source; this PR links the merged fix to the fixed Deno release and records the NVD publication timestamp.

Current audit, July 8, 2026:

  • GHSA-9xg4-qhm4-g43w is live and not withdrawn.
  • CVE-2026-49440 resolves in NVD with Analyzed status and published timestamp 2026-06-23T18:18:03.563.
  • PR #34391 merged to main as commit b7e72335c0c5c935d94cfeeda8cba992642653e9.
  • Release v2.8.1 is published and not marked draft or prerelease.
  • crates.io deno 2.8.1 resolves and is not yanked.
  • Local JSON validation and whitespace checks pass, and the diff only changes this advisory.

Only references and NVD publication metadata are changed.

@cookesan cookesan changed the title Add Deno checkPrime fix reference Add Deno checkPrime advisory references Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant