Skip to content

Add Vitest fixed release references#8532

Draft
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8532from
cookesan:vitest-5xrq-release-references
Draft

Add Vitest fixed release references#8532
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8532from
cookesan:vitest-5xrq-release-references

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Adds Vitest v3.2.6 and v4.1.0 release references for GHSA-5xrq-8626-4rwp.

Audit refresh, July 8, 2026:

  • Confirmed vitest@3.2.6 and vitest@4.1.0 exist in the npm registry.
  • Confirmed the upstream Vitest v3.2.6 and v4.1.0 release tags still resolve, and GitHub's advisory record maps the GHSA to CVE-2026-47429.
  • Local checks passed: one advisory JSON file changed in the PR diff, JSON parses, git diff --check passes, and the worktree is clean.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8532 July 7, 2026 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant