Skip to content

Correct Mise task include fixed version#8598

Draft
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8598from
cookesan:mise-55441-nvd-reference
Draft

Correct Mise task include fixed version#8598
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8598from
cookesan:mise-55441-nvd-reference

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Summary

  • correct the fixed version for the Mise task-include advisory from 2026.6.4 to 2026.6.5
  • add the upstream release and exact fix commit references
  • keep the NVD advisory reference for CVE-2026-55441

Validation

  • confirmed the advisory aliases CVE-2026-55441 and affects the crates.io mise package
  • confirmed v2026.6.4 lacks fix commit 04b13dc9 and v2026.6.5 contains it
  • confirmed source markers for task include trust checks are absent in v2026.6.4 and present in v2026.6.5
  • confirmed downloaded crates.io artifacts for 2026.6.4 and 2026.6.5 match crates.io checksums and have the same fixed-version boundary
  • confirmed NVD returns CVE-2026-55441 with status Deferred
  • ran jq empty on the advisory JSON
  • ran git diff --check

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8598 July 7, 2026 11:34
@cookesan cookesan force-pushed the mise-55441-nvd-reference branch from 33b727b to 91e5d1b Compare July 7, 2026 12:07
@cookesan cookesan changed the title Add Mise CVE-2026-55441 NVD reference Correct Mise task include fixed version Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant