Note remediation for GHSA-jg74-mwgw-v6x3

cipherboy · cipherboy · commit 070fecff6f64 · 2025-08-12T11:54:03.000-05:00
This was not assigned a separate CVE as HashiCorp unilaterally disclosed this without referencing the project. This has been remediated for a while. See also: https://openbao.org/docs/release-notes/2-0-0/#202 See also: openbao/openbao#561 See also: openbao/openbao@d5b4e92 Signed-off-by: Alexander Scheel <alexander.m.scheel@gmail.com>
diff --git a/advisories/github-reviewed/2024/09/GHSA-jg74-mwgw-v6x3/GHSA-jg74-mwgw-v6x3.json b/advisories/github-reviewed/2024/09/GHSA-jg74-mwgw-v6x3/GHSA-jg74-mwgw-v6x3.json
@@ -49,6 +49,9 @@
           "events": [
             {
               "introduced": "0"
+            },
+            {
+              "fixed": "2.0.2"
             }
           ]
         }
@@ -93,4 +96,4 @@
     "github_reviewed_at": "2024-09-26T21:53:43Z",
     "nvd_published_at": "2024-09-26T20:15:07Z"
   }
-}
+}

Original file line number	Diff line number	Diff line change
`@@ -49,6 +49,9 @@`
`49`	`49`	`"events": [`
`50`	`50`	`{`
`51`	`51`	`"introduced": "0"`
	`52`	`+ },`
	`53`	`+ {`
	`54`	`+ "fixed": "2.0.2"`
`52`	`55`	`}`
`53`	`56`	`]`
`54`	`57`	`}`
`@@ -93,4 +96,4 @@`
`93`	`96`	`"github_reviewed_at": "2024-09-26T21:53:43Z",`
`94`	`97`	`"nvd_published_at": "2024-09-26T20:15:07Z"`
`95`	`98`	`}`
`96`		`-}`
	`99`	`+}`