From c13723ead1d328043ce0abb7f5789db29ca58716 Mon Sep 17 00:00:00 2001 From: Deepak Ravisankar Date: Wed, 19 Aug 2026 00:13:54 -0700 Subject: [PATCH 1/4] Improve GHSA-8qqm-fp2q-v734 --- .../2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json b/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json index 28b906533287..f3115d25f448 100644 --- a/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json +++ b/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8qqm-fp2q-v734", - "modified": "2026-07-17T21:49:48Z", + "modified": "2026-07-21T09:31:01Z", "published": "2026-07-17T21:49:48Z", "aliases": [], "summary": "Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies", @@ -48,7 +48,12 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-130", + "CWE-636", + "CWE-754", + "CWE-863" + ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2026-07-17T21:49:48Z", From ea755ef17022c40edaa6d7fe36ac493a77b6e963 Mon Sep 17 00:00:00 2001 From: Deepak Ravisankar Date: Wed, 19 Aug 2026 00:17:04 -0700 Subject: [PATCH 2/4] [GHSA-8qqm-fp2q-v734] Add missing CWE IDs --- .../2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json b/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json index f3115d25f448..7b272a1b9edf 100644 --- a/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json +++ b/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8qqm-fp2q-v734", - "modified": "2026-07-21T09:31:01Z", + "modified": "2026-07-17T21:49:48Z", "published": "2026-07-17T21:49:48Z", "aliases": [], "summary": "Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies", From 3b5ebf326971c5f2099cd70bb3988ff7b42694e0 Mon Sep 17 00:00:00 2001 From: Deepak Ravisankar Date: Wed, 19 Aug 2026 00:19:33 -0700 Subject: [PATCH 3/4] Remove CWE-130 per review feedback --- .../2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json | 1 - 1 file changed, 1 deletion(-) diff --git a/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json b/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json index 7b272a1b9edf..79b4050401bc 100644 --- a/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json +++ b/advisories/github-reviewed/2026/07/GHSA-8qqm-fp2q-v734/GHSA-8qqm-fp2q-v734.json @@ -49,7 +49,6 @@ ], "database_specific": { "cwe_ids": [ - "CWE-130", "CWE-636", "CWE-754", "CWE-863" From ce3e77640fddaae0dfa4de3aa283dd9645f849ce Mon Sep 17 00:00:00 2001 From: Deepak Ravisankar Date: Wed, 19 Aug 2026 00:26:25 -0700 Subject: [PATCH 4/4] [GHSA-8qqm-fp2q-v734] Add CWE-636, CWE-754, CWE-863