From 36475e78853549b45a234397b29a974fb6bae53d Mon Sep 17 00:00:00 2001 From: Yusuke Hayashi Date: Tue, 28 Jul 2026 09:47:15 +0900 Subject: [PATCH 1/2] Set fixed version for GHSA-9fjq-45qv-pcm7 --- .../GHSA-9fjq-45qv-pcm7.json | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json b/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json index 264fcd7b0a8bc..3497ccc1fb066 100644 --- a/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json +++ b/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9fjq-45qv-pcm7", - "modified": "2025-12-26T18:55:53Z", + "modified": "2025-12-26T18:55:54Z", "published": "2025-12-26T18:55:53Z", "aliases": [], "summary": "ruint affected by unsoundness of safe `reciprocal_mg10`", @@ -26,7 +26,7 @@ "introduced": "0" }, { - "last_affected": "1.17.0" + "fixed": "1.17.1" } ] } @@ -49,6 +49,18 @@ { "type": "WEB", "url": "https://rustsec.org/advisories/RUSTSEC-2025-0137.html" + }, + { + "type": "WEB", + "url": "https://github.com/alloy-rs/ruint/pull/553" + }, + { + "type": "FIX", + "url": "https://github.com/alloy-rs/ruint/commit/bc3fad727853ce31fa78a053c950748db8571369" + }, + { + "type": "WEB", + "url": "https://github.com/alloy-rs/ruint/releases/tag/v1.17.1" } ], "database_specific": { @@ -60,4 +72,4 @@ "github_reviewed_at": "2025-12-26T18:55:53Z", "nvd_published_at": null } -} \ No newline at end of file +} From 32fecf84014bd7dd68f4234077ad8d1b76909652 Mon Sep 17 00:00:00 2001 From: Yusuke Hayashi Date: Tue, 28 Jul 2026 09:48:32 +0900 Subject: [PATCH 2/2] Refine ruint fix references --- .../12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json b/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json index 3497ccc1fb066..12ee885ae458b 100644 --- a/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json +++ b/advisories/github-reviewed/2025/12/GHSA-9fjq-45qv-pcm7/GHSA-9fjq-45qv-pcm7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9fjq-45qv-pcm7", - "modified": "2025-12-26T18:55:54Z", + "modified": "2025-12-26T18:55:55Z", "published": "2025-12-26T18:55:53Z", "aliases": [], "summary": "ruint affected by unsoundness of safe `reciprocal_mg10`", @@ -55,12 +55,16 @@ "url": "https://github.com/alloy-rs/ruint/pull/553" }, { - "type": "FIX", - "url": "https://github.com/alloy-rs/ruint/commit/bc3fad727853ce31fa78a053c950748db8571369" + "type": "WEB", + "url": "https://github.com/alloy-rs/ruint/releases/tag/v1.17.1" }, { "type": "WEB", - "url": "https://github.com/alloy-rs/ruint/releases/tag/v1.17.1" + "url": "https://github.com/alloy-rs/ruint/pull/552" + }, + { + "type": "FIX", + "url": "https://github.com/alloy-rs/ruint/commit/8090e7f9393e7481a20d2e61dac04e78efcc90dd" } ], "database_specific": {