Skip to content

[GHSA-27j2-h3m2-8237] Path traversal vulnerability in Apache FreeMarker... - #9583

Open
hypoflex wants to merge 1 commit into
hypoflex/advisory-improvement-9583from
hypoflex-GHSA-27j2-h3m2-8237
Open

hypoflex wants to merge 1 commit into
hypoflex/advisory-improvement-9583from
hypoflex-GHSA-27j2-h3m2-8237

Conversation

@hypoflex

Copy link
Copy Markdown

Updates

  • Affected products
  • Summary

Comments
Affected product was missing

Copilot AI balanced review requested due to automatic review settings September 16, 2026 08:29
@github-actions
github-actions Bot changed the base branch from main to hypoflex/advisory-improvement-9583 September 16, 2026 08:29

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The package coordinates and version range consistently reflect the advisory details.

Pull request overview

Adds the missing Apache FreeMarker product and vulnerability summary.

Changes:

  • Adds a concise advisory summary.
  • Marks Maven package org.freemarker:freemarker versions 2.2.0–2.3.34 as affected and 2.3.35 as fixed.
File summaries
File Description
advisories/unreviewed/2026/09/GHSA-27j2-h3m2-8237/GHSA-27j2-h3m2-8237.json Adds affected-package metadata and summary.
Review details
  • Files reviewed: 1/1 changed files
  • Comments generated: 0
  • Review effort level: Balanced

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants