bootstrap vulnerability CVE-2024-6531 should have version range ending 4.6.2 not 999
dryfish opened this issue · comments
As listed in the links just added in 97e894a (GHSA-vc8w-jr9v-vj7f and https://www.herodevs.com/vulnerability-directory/cve-2024-6531) the affected version range is >= 4.0.0, <= 4.6.2 whereas the commit above lists >= 4.0.0, <= 999
Additionally, bootstrap CVE-2024-6484 should be >= 2.0.0, <= 3.4.1 as detailed at https://www.herodevs.com/vulnerability-directory/cve-2024-6484