From 996850e6a3e3f13ebdb371fb64ba078fa052385f Mon Sep 17 00:00:00 2001 From: Paco Cartones Date: Fri, 28 Aug 2026 18:50:49 +0000 Subject: [PATCH] [GHSA-4jvx-93h3-f45h] openc3: correct the 7.0.x RubyGems fixed version to 7.0.0.pre.rc3 CVE-2026-42085. The 7.0.x range's fixed: 7.0.0-rc3 is not a valid RubyGems version; the same range's introduced already uses the canonical 7.0.0.pre.rc1, so 7.0.0-rc3 is a transcription of 7.0.0.pre.rc3. The 6.x range (6.10.5) is untouched. --- .../2026/04/GHSA-4jvx-93h3-f45h/GHSA-4jvx-93h3-f45h.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/04/GHSA-4jvx-93h3-f45h/GHSA-4jvx-93h3-f45h.json b/advisories/github-reviewed/2026/04/GHSA-4jvx-93h3-f45h/GHSA-4jvx-93h3-f45h.json index 31e56a08cdab..002fdb6255f9 100644 --- a/advisories/github-reviewed/2026/04/GHSA-4jvx-93h3-f45h/GHSA-4jvx-93h3-f45h.json +++ b/advisories/github-reviewed/2026/04/GHSA-4jvx-93h3-f45h/GHSA-4jvx-93h3-f45h.json @@ -47,7 +47,7 @@ "introduced": "7.0.0.pre.rc1" }, { - "fixed": "7.0.0-rc3" + "fixed": "7.0.0.pre.rc3" } ] } @@ -81,7 +81,7 @@ }, { "type": "WEB", - "url": "https://github.com/OpenC3/cosmos/releases/tag/v7.0.0-rc3" + "url": "https://github.com/OpenC3/cosmos/releases/tag/v7.0.0.pre.rc3" }, { "type": "WEB",