Skip to content

[GHSA-qm9p-f9j5-w83w] Parcel has an Origin Validation Error vulnerability#6369

Merged
advisory-database[bot] merged 1 commit intoG-Rath/advisory-improvement-6369from
G-Rath-GHSA-qm9p-f9j5-w83w
Oct 29, 2025
Merged

[GHSA-qm9p-f9j5-w83w] Parcel has an Origin Validation Error vulnerability#6369
advisory-database[bot] merged 1 commit intoG-Rath/advisory-improvement-6369from
G-Rath-GHSA-qm9p-f9j5-w83w

Conversation

@G-Rath
Copy link

@G-Rath G-Rath commented Oct 29, 2025

Updates

  • Affected products
  • Description

Comments
Updated description and affected versions

Copilot AI review requested due to automatic review settings October 29, 2025 20:43
@github-actions github-actions bot changed the base branch from main to G-Rath/advisory-improvement-6369 October 29, 2025 20:44
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the GitHub Security Advisory GHSA-qm9p-f9j5-w83w for a Parcel vulnerability to reflect more accurate version information and vulnerability details.

Key Changes

  • Updated the vulnerability description to clarify affected versions (changing from "npm parcel 2.0.0-alpha and before" to "parcel versions 1.6.0 and above")
  • Updated the last_affected version from 2.14.4 to 2.16.0
  • Updated the modified timestamp to reflect the changes

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database advisory-database bot merged commit f741a29 into G-Rath/advisory-improvement-6369 Oct 29, 2025
10 checks passed
@advisory-database
Copy link
Contributor

Hi @G-Rath! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database bot deleted the G-Rath-GHSA-qm9p-f9j5-w83w branch October 29, 2025 22:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant