shiva kumar

Incorrect Package Name in Advisory GHSA-x8rq-rc7x-5fg5 for @uppy/component

2

Hello team, I noticed that the GitHub advisory for GHSA-x8rq-rc7x-5fg5 lists the vulnerable package as uppy, whereas the actual vulnerable package appears to be @uppy/component. This vulnerability is a bypass...

Advisory GHSA-f4w8-cv6p-x6r5 lists incorrect fixed version

1

I have noticed an issue with the details provided in the advisory [GHSA-f4w8-cv6p-x6r5](https://github.com/advisories/GHSA-f4w8-cv6p-x6r5) regarding the fixed version. The advisory lists 8.1.1 as the version where the issue is fixed. However,...