[GHSA-w3x6-4m5h-cxqf] Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability #7398
Conversation
github-actions
Bot
changed the base branch from
main
to
DylanW01/advisory-improvement-7398
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Updates the advisory metadata for CVE-2026-26171 to reflect the correct CVSS v3.1 vector/scoring and corresponding severity.
Changes:
- Update CVSS v3.1 vector from
A:NtoA:H(High, 7.5) - Update advisory severity from
LOWtoHIGH - Bump
modifiedtimestamp
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "schema_version": "1.4.0", | ||
| "id": "GHSA-w3x6-4m5h-cxqf", | ||
| "modified": "2026-04-14T23:31:08Z", | ||
| "modified": "2026-04-14T23:31:11Z", |
There was a problem hiding this comment.
modified is now later than github_reviewed_at while github_reviewed remains true. If github_reviewed_at is intended to represent the timestamp of the last review of the current content, it should be updated alongside this change (or the review flag/time should be handled consistently) to avoid downstream consumers treating the updated content as being reviewed at an earlier time.
| "modified": "2026-04-14T23:31:11Z", | |
| "modified": "2026-04-14T23:31:08Z", |
| "severity": "LOW", | ||
| "severity": "HIGH", | ||
| "github_reviewed": true, | ||
| "github_reviewed_at": "2026-04-14T23:31:08Z", |
There was a problem hiding this comment.
modified is now later than github_reviewed_at while github_reviewed remains true. If github_reviewed_at is intended to represent the timestamp of the last review of the current content, it should be updated alongside this change (or the review flag/time should be handled consistently) to avoid downstream consumers treating the updated content as being reviewed at an earlier time.
| "github_reviewed_at": "2026-04-14T23:31:08Z", | |
| "github_reviewed_at": "2026-04-14T23:31:11Z", |
advisory-database
Bot
merged commit 4d70ebb
into
DylanW01/advisory-improvement-7398
|
Hi @DylanW01! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future! |
Updates
Comments
Updated to the valid CVSS 3.1 format CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H which correctly evaluates to High (7.5) to match the description.