From 2e0093e00bc6698bc9f2c8bde8cc9f01b025b0a8 Mon Sep 17 00:00:00 2001 From: cswimr Date: Wed, 10 Dec 2025 15:04:23 -0600 Subject: [PATCH 1/2] Add the version in which the vulnerability was fixed to `PYSEC-2023-241.yaml` Add the version in which the stated vulnerability was fixed to `PYSEC-2023-241.yaml` and removed versions '1.1.1', '1.2.0', and '1.3.0'. Closes #251. This is my first time contributing to something using the OSV format, so I apologize if I messed up the schema somehow. I didn't try to validate it myself. --- vulns/piccolo/PYSEC-2023-241.yaml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/vulns/piccolo/PYSEC-2023-241.yaml b/vulns/piccolo/PYSEC-2023-241.yaml index 0ce6d068..a231c3dc 100644 --- a/vulns/piccolo/PYSEC-2023-241.yaml +++ b/vulns/piccolo/PYSEC-2023-241.yaml @@ -36,6 +36,7 @@ affected: - type: ECOSYSTEM events: - introduced: '0' + - fixed: '1.1.1' versions: - 0.1.0 - 0.1.1 @@ -283,9 +284,6 @@ affected: - 1.0a2 - 1.0a3 - 1.1.0 - - 1.1.1 - - 1.2.0 - - 1.3.0 severity: - type: CVSS_V3 score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N From 431d875a7a0509c53ca0d9a779b62bfb6284b11b Mon Sep 17 00:00:00 2001 From: cswimr Date: Wed, 10 Dec 2025 18:01:21 -0600 Subject: [PATCH 2/2] add last affected version to PYSEC-2023-241 --- vulns/piccolo/PYSEC-2023-241.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/vulns/piccolo/PYSEC-2023-241.yaml b/vulns/piccolo/PYSEC-2023-241.yaml index a231c3dc..10441a79 100644 --- a/vulns/piccolo/PYSEC-2023-241.yaml +++ b/vulns/piccolo/PYSEC-2023-241.yaml @@ -36,6 +36,7 @@ affected: - type: ECOSYSTEM events: - introduced: '0' + - last_affected: '1.1.0' - fixed: '1.1.1' versions: - 0.1.0