Skip to content

Conversation

@wtwhite
Copy link

@wtwhite wtwhite commented Oct 6, 2023

Updates

  • Affected products

Comments
Several other components are also affected as a result of cloning (copying source code) or shading (copying source code and renaming packages). Proof-of-Vulnerability projects with tests to verify the presence of the CVE can be found here: https://github.com/jensdietrich/xshady-release/.

See #2258, especially #2258 (comment), for more details.

@darakian
Copy link
Contributor

darakian commented Oct 9, 2023

Manually merged in.

@darakian darakian closed this Oct 9, 2023
@wtwhite
Copy link
Author

wtwhite commented Oct 9, 2023

Hi @darakian, thanks for merging this in!

Just wondering if it's possible to also include the reference element we added in our PR ({"type": "WEB", "url": "https://github.com/jensdietrich/xshady-release/tree/main/CVE-2019-12402"}, which links to our proof-of-vulnerability test? (Or is there a better way to record this info?)

@darakian
Copy link
Contributor

darakian commented Oct 9, 2023

It is. Just updated. Sorry about that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants