Skip to content

Add Statamic CSV export fixed references#8435

Open
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8435from
cookesan:statamic-h77m-fixed-references
Open

Add Statamic CSV export fixed references#8435
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8435from
cookesan:statamic-h77m-fixed-references

Conversation

@cookesan

@cookesan cookesan commented Jun 30, 2026

Copy link
Copy Markdown

Adds Statamic CSV export fixed references to GHSA-h77m-qrj7-jxcw.

Audit refresh, July 8, 2026:

  • Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
  • Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-h77m-qrj7-jxcw/GHSA-h77m-qrj7-jxcw.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
  • Revalidated the added public references and package-version evidence in the diff; all resolve through their source site or registry.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8435 June 30, 2026 13:32
@cookesan

cookesan commented Jul 7, 2026

Copy link
Copy Markdown
Author

Review note: this expands GHSA-h77m-qrj7-jxcw with the merged Statamic CSV export fix PR, its merge commit, the v5.73.24 and v6.20.1 releases, and matching Packagist package evidence. I checked the PR head JSON against the OSV schema, confirmed statamic/cms#14760 is merged at f17c098e52a92597fc5f81bd287700b3d05f4add, confirmed both release URLs resolve, and confirmed Packagist lists statamic/cms v5.73.24 and v6.20.1; the affected ranges, CVSS score, alias, and package metadata stay unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant