Skip to content

Commit 9901439

Browse files
thatnealpatelgopherbot
authored andcommitted
data/reports: modify 1 report
Fixes #3442 Fixes #3443 Change-Id: I08596ccbbe8b3f097c975e978ae2495cd9d853f5 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/661095 LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Damien Neil <[email protected]> Auto-Submit: Neal Patel <[email protected]>
1 parent bc2a31f commit 9901439

File tree

2 files changed

+9
-9
lines changed

2 files changed

+9
-9
lines changed

data/osv/GO-2025-3443.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@
66
"aliases": [
77
"GHSA-r3r4-g7hq-pq4f"
88
],
9-
"summary": "CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft",
10-
"details": "CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft",
9+
"summary": "CometBFT allows a malicious peer to stall network by disseminating valid-looking block parts in github.com/cometbft/cometbft",
10+
"details": "CometBFT allows a malicious peer to stall network by disseminating valid-looking block parts in github.com/cometbft/cometbft",
1111
"affected": [
1212
{
1313
"package": {
@@ -22,7 +22,7 @@
2222
"introduced": "0"
2323
},
2424
{
25-
"fixed": "0.38.16"
25+
"fixed": "0.38.17"
2626
}
2727
]
2828
}
@@ -86,6 +86,6 @@
8686
],
8787
"database_specific": {
8888
"url": "https://pkg.go.dev/vuln/GO-2025-3443",
89-
"review_status": "UNREVIEWED"
89+
"review_status": "REVIEWED"
9090
}
9191
}

data/reports/GO-2025-3443.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@ id: GO-2025-3443
22
modules:
33
- module: github.com/cometbft/cometbft
44
versions:
5-
- fixed: 0.38.16
6-
vulnerable_at: 0.38.15
5+
- fixed: 0.38.17
6+
vulnerable_at: 0.38.16
77
packages:
88
- package: github.com/cometbft/cometbft/types
99
symbols:
@@ -21,8 +21,8 @@ modules:
2121
derived_symbols:
2222
- PartFromProto
2323
summary: |-
24-
CometBFT allows a malicious peer to stall the network by disseminating seemingly
25-
valid block parts in github.com/cometbft/cometbft
24+
CometBFT allows a malicious peer to stall network by disseminating
25+
valid-looking block parts in github.com/cometbft/cometbft
2626
ghsas:
2727
- GHSA-r3r4-g7hq-pq4f
2828
references:
@@ -32,4 +32,4 @@ references:
3232
source:
3333
id: GHSA-r3r4-g7hq-pq4f
3434
created: 2025-02-04T13:46:41.019336-05:00
35-
review_status: NEEDS_REVIEW
35+
review_status: REVIEWED

0 commit comments

Comments
 (0)