Skip to content

Add python-multipart Content-Length fix references#8437

Open
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8437from
cookesan:python-multipart-v9pg-fixed-references
Open

Add python-multipart Content-Length fix references#8437
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8437from
cookesan:python-multipart-v9pg-fixed-references

Conversation

@cookesan

@cookesan cookesan commented Jun 30, 2026

Copy link
Copy Markdown

Adds python-multipart Content-Length fix references to GHSA-v9pg-7xvm-68hf.

Audit refresh, July 8, 2026:

  • Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
  • Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-v9pg-7xvm-68hf/GHSA-v9pg-7xvm-68hf.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
  • Revalidated the added public references and package-version evidence in the diff; all resolve through their source site or registry.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8437 June 30, 2026 13:50
@cookesan

cookesan commented Jul 7, 2026

Copy link
Copy Markdown
Author

Review note: this expands GHSA-v9pg-7xvm-68hf with the python-multipart Content-Length fix commit plus 0.0.31 release and PyPI package evidence. I checked the PR head JSON against the OSV schema, confirmed commit c814948acf509cef7881fa75c969969b19239bbf resolves to the negative Content-Length rejection fix, confirmed the release URL resolves, and confirmed PyPI has python-multipart==0.0.31; the affected PyPI range, CVSS score, alias, and package metadata stay unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant