Skip to content

Add SPID AspNetCore fixed package references#8590

Draft
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8590from
cookesan:spid-aspnetcore-24894-nvd-reference
Draft

Add SPID AspNetCore fixed package references#8590
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8590from
cookesan:spid-aspnetcore-24894-nvd-reference

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Adds SPID.AspNetCore.Authentication 3.4.0 release, NuGet package, and NVD references for CVE-2025-24894 to GHSA-36h8-r92j-w9vw.

Audit refresh, July 8, 2026:

  • Confirmed GHSA-36h8-r92j-w9vw maps to CVE-2025-24894, and NVD has a record for CVE-2025-24894.
  • Confirmed the upstream fix commit, 3.4.0 release tag, and NuGet 3.4.0 package reference resolve.
  • Local checks passed: one advisory JSON file changed in the PR diff, JSON parses, git diff --check passes, and the worktree is clean.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8590 July 7, 2026 11:10
@cookesan cookesan force-pushed the spid-aspnetcore-24894-nvd-reference branch from 2055484 to babe30d Compare July 7, 2026 12:39
@cookesan cookesan changed the title Add SPID AspNetCore NVD reference Add SPID AspNetCore fixed package references Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant