Skip to content

Add Sulu fixed release references#8594

Draft
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8594from
cookesan:sulu-24807-nvd-reference
Draft

Add Sulu fixed release references#8594
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8594from
cookesan:sulu-24807-nvd-reference

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Summary

  • add the Sulu 2.4.16 and 2.5.12 fixed release references
  • keep the NVD advisory reference for CVE-2024-24807

Validation

  • confirmed the advisory aliases CVE-2024-24807 and affects the Packagist sulu/sulu package
  • confirmed the advisory fixed versions are 2.4.16 and 2.5.12
  • confirmed the Sulu 2.4.16 and 2.5.12 release URLs return HTTP 200
  • confirmed Packagist maps sulu/sulu 2.4.16 and 2.5.12 to the corresponding Git tag commits
  • confirmed the 2.4.15...2.4.16 and 2.5.11...2.5.12 comparisons both contain fix commit 570c7812
  • confirmed the fix commit removes the autocomplete suggestion dangerouslySetInnerHTML path
  • confirmed NVD returns CVE-2024-24807 with status Modified
  • ran jq empty on the advisory JSON
  • ran git diff --check

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8594 July 7, 2026 11:24
@cookesan cookesan force-pushed the sulu-24807-nvd-reference branch from 823eaa6 to 79fe9a7 Compare July 7, 2026 12:28
@cookesan cookesan changed the title Add Sulu NVD reference Add Sulu fixed release references Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant