Skip to content

fix(advisory): correct SurrealDB alpha range - #9368

Open
Pleo2 wants to merge 1 commit into
github:Pleo2/advisory-improvement-9368from
Pleo2:fix/ghsa-m3c3-alpha-patched-version
Open

fix(advisory): correct SurrealDB alpha range#9368
Pleo2 wants to merge 1 commit into
github:Pleo2/advisory-improvement-9368from
Pleo2:fix/ghsa-m3c3-alpha-patched-version

Conversation

@Pleo2

@Pleo2 Pleo2 commented Sep 5, 2026

Copy link
Copy Markdown

Summary

  • mark SurrealDB 3.0.0-alpha.8 as the first patched alpha release
  • include 3.0.0-alpha.7 in the last known affected range
  • leave the 2.1, 2.2, and 2.3 release lines unchanged

Evidence

The upstream advisory states that the first release following 3.0.0-alpha.7 is not affected. Version 3.0.0-alpha.7 was published before the fix was merged, while 3.0.0-alpha.8 was published afterward and its tag contains the fix commit.

@github-actions
github-actions Bot changed the base branch from main to Pleo2/advisory-improvement-9368 September 5, 2026 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant