[GHSA-h7wm-ph43-c39p] Scrapy denial of service vulnerability #6640
Conversation
github-actions
bot
changed the base branch from
main
to
G-Rath/advisory-improvement-6640
There was a problem hiding this comment.
Pull request overview
This PR updates a GitHub Security Advisory (GHSA-h7wm-ph43-c39p) for a Scrapy denial of service vulnerability (CVE-2017-14158). The changes expand the range of affected versions and modify the advisory's timestamp.
Changes:
- Updated the last affected version from 2.11.1 to 2.14.1 to reflect a broader range of vulnerable Scrapy versions
- Modified the advisory's timestamp (appears to be reverting to an earlier date)
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "schema_version": "1.4.0", | ||
| "id": "GHSA-h7wm-ph43-c39p", | ||
| "modified": "2024-10-23T18:38:06Z", | ||
| "modified": "2024-02-20T19:56:53Z", |
There was a problem hiding this comment.
The modified timestamp is being changed from a later date (2024-10-23) to an earlier date (2024-02-20), which moves the timestamp backwards by approximately 8 months. This appears incorrect - the modified field should reflect when the advisory was last updated and should typically move forward in time, not backward. If this is truly a correction of an incorrect timestamp, it should be clearly documented why the timestamp is being reverted.
| "modified": "2024-02-20T19:56:53Z", | |
| "modified": "2024-10-23T00:00:00Z", |
Updates
Comments
Updated impacted versions