[ranjiGT]

Updates

• References

Comments

Reason for Change

Add the official upstream russh v0.61.1 security-release reference to GHSA-wwx6-x28x-8259 (CVE-2026-46702).

Supporting Evidence

The official russh v0.61.1 release notes explicitly identify GHSA-wwx6-x28x-8259 and document the security fix for excessive resource consumption caused by insufficient limits on decompressed SSH packets.

The patched version 0.61.1 is already documented in the advisory's affected-package metadata.

Justification

Adding the official patched-release reference provides direct, maintainer-controlled evidence identifying the release containing the security fix. It improves traceability and helps developers verify the remediation.

Scope: Reference-only improvement. No changes to affected-package metadata, vulnerable or patched version ranges, vulnerability description, CWE classifications, severity, or CVSS scoring.

[github]

Hi there @Eugeny! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

🟢 Approval recommended

The official release notes identify this advisory and match its existing fixed version, with no unresolved issues.

No open issues 🎉

What changed in this PR

Improves remediation traceability for GHSA-wwx6-x28x-8259 (CVE-2026-46702) by linking the advisory to the official russh security release.

Changes:

• Adds the upstream v0.61.1 release as a WEB reference.
• Updates the modification timestamp without changing affected versions or vulnerability details.

File	Description
advisories/​github-reviewed/​2026/​05/​GHSA-wwx6-x28x-8259/​GHSA-wwx6-x28x-8259.json	Adds the security-release reference and updates the modification timestamp.

_{Review effort: Max}