From 67ac510c764a72a1b03fa0e118b90b92f49b4f0b Mon Sep 17 00:00:00 2001 From: Dustin Edwards Date: Tue, 15 Sep 2026 21:54:36 -0500 Subject: [PATCH] Record 2.0.3 as the first patched version for GHSA-w3rx-r6r6-pgpr --- .../2026/06/GHSA-w3rx-r6r6-pgpr/GHSA-w3rx-r6r6-pgpr.json | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-w3rx-r6r6-pgpr/GHSA-w3rx-r6r6-pgpr.json b/advisories/github-reviewed/2026/06/GHSA-w3rx-r6r6-pgpr/GHSA-w3rx-r6r6-pgpr.json index e44e778f2d99..873791f08687 100644 --- a/advisories/github-reviewed/2026/06/GHSA-w3rx-r6r6-pgpr/GHSA-w3rx-r6r6-pgpr.json +++ b/advisories/github-reviewed/2026/06/GHSA-w3rx-r6r6-pgpr/GHSA-w3rx-r6r6-pgpr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w3rx-r6r6-pgpr", - "modified": "2026-08-07T20:55:24Z", + "modified": "2026-09-16T02:53:03Z", "published": "2026-06-10T15:31:30Z", "aliases": [ "CVE-2025-71330" @@ -32,7 +32,7 @@ "introduced": "0" }, { - "last_affected": "2.0.2" + "fixed": "2.0.3" } ] } @@ -48,6 +48,10 @@ "type": "PACKAGE", "url": "https://github.com/image-size/image-size" }, + { + "type": "FIX", + "url": "https://codeberg.org/image-size/image-size/commit/e6e83a5578961de81f6d5834d90fb7430d8f29a5" + }, { "type": "WEB", "url": "https://joshua.hu/image-size-infinite-loop-dos-vulnerabilities"