I also see: - https://github.com/advisories/GHSA-hfm8-9jrf-7g9w https://github.com/advisories/GHSA-hfm8-9jrf-7g9w - https://github.com/advisories/GHSA-5g7q-qh

I also see: - https://github.com/advisories/GHSA-hfm8-9jrf-7g9w https://github.com/advisories/GHSA-hfm8-9jrf-7g9w - https://github.com/advisories/GHSA-5g7q-qh7p-jjvm https://github.com/advisories/GHSA-5g7q-qh7p-jjvm - https://github.com/advisories/GHSA-8mgj-vmr8-frr6 https://github.com/advisories/GHSA-8mgj-vmr8-frr6 - https://github.com/advisories/GHSA-m99c-cfww-cxqx https://github.com/advisories/GHSA-m99c-cfww-cxqx I wonder if they're all from the same thing, they all popped up at the same time. edit: they do appear to all be the same thing, and the advisory version wildcard is wrong: https://github.com/github/advisory-database/issues/6099 https://github.com/github/advisory-database/issues/6099