Skip to content

[GHSA-9hg7-4gq8-ppp9] randomUUID in Scala.js before 1.10.0 generates...#8787

Open
Malayke wants to merge 1 commit into
Malayke/advisory-improvement-8787from
Malayke-GHSA-9hg7-4gq8-ppp9
Open

[GHSA-9hg7-4gq8-ppp9] randomUUID in Scala.js before 1.10.0 generates...#8787
Malayke wants to merge 1 commit into
Malayke/advisory-improvement-8787from
Malayke-GHSA-9hg7-4gq8-ppp9

Conversation

@Malayke

@Malayke Malayke commented Jul 23, 2026

Copy link
Copy Markdown

Updates

  • Affected products
  • Source code location
  • Summary

Comments
Map Maven packages org.scala-js:scalajs-library_2.11/2.12/2.13 from upstream GHSA-j2f9-w8wh-9ww4

Copilot AI review requested due to automatic review settings July 23, 2026 10:45
@github-actions
github-actions Bot changed the base branch from main to Malayke/advisory-improvement-8787 July 23, 2026 10:47

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Maps the Scala.js predictable UUID vulnerability to its Maven artifacts and upstream source.

Changes:

  • Adds a summary and package-source reference.
  • Marks Scala.js library artifacts for Scala 2.11–2.13 as affected before 1.10.0.
  • Updates the advisory modification timestamp.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants