Skip to content

Add OpenAM scripting fixed source tag and package references#8450

Open
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8450from
cookesan:openam-69j4-fixed-package-reference
Open

Add OpenAM scripting fixed source tag and package references#8450
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8450from
cookesan:openam-69j4-fixed-package-reference

Conversation

@cookesan

@cookesan cookesan commented Jun 30, 2026

Copy link
Copy Markdown

Adds OpenAM scripting fixed source tag and package references to GHSA-69j4-qvqr-hpw3.

Audit refresh, July 8, 2026:

  • Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
  • Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-69j4-qvqr-hpw3/GHSA-69j4-qvqr-hpw3.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
  • Revalidated the added public references in the diff; all resolve through their source site or registry.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8450 June 30, 2026 16:41
@cookesan cookesan changed the title Add OpenAM scripting fixed package reference Add OpenAM scripting fixed source tag and package references Jun 30, 2026
@cookesan

cookesan commented Jul 7, 2026

Copy link
Copy Markdown
Author

Review note: this expands GHSA-69j4-qvqr-hpw3 with the OpenAM 16.1.1 source tag and Maven Central package evidence for openam-scripting. I checked the PR head JSON against the OSV schema, confirmed the 16.1.1 source tag URL resolves, and confirmed Maven Central has org.openidentityplatform.openam:openam-scripting:16.1.1; the affected Maven range, CVSS 4.0 score, alias, and package metadata stay unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant