Repository navigation
[GHSA-jm5p-837g-rv8g] Wagtail: Improper restriction handling on Page translation API endpoint - #10506
Conversation
|
Hi there @gasman! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository. This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory |
There was a problem hiding this comment.
🟢 Approval recommended
The added references document the relevant security fix, match the existing patched versions, and introduce no identified issues.
No open issues 🎉
What changed in this PR
Improves traceability for the Wagtail Page translation API advisory by adding official security-release references, without changing affected versions or vulnerability details.
Changes:
- Adds release links for v7.0.9, v7.3.4, v7.4.3, and v8.0rc2.
- Updates the advisory’s modification timestamp.
| File | Description |
|---|---|
| advisories/github-reviewed/2026/08/GHSA-jm5p-837g-rv8g/GHSA-jm5p-837g-rv8g.json | Adds four upstream release references and updates the timestamp. |
Review effort: Max
de356b3
into
ranjiGT/advisory-improvement-10506
|
Hi @ranjiGT! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future! |
Updates
Comments
Reason for Change
Add official upstream security-release references for the four patched Wagtail versions already documented in this advisory.
Supporting Evidence
The following official Wagtail releases document the security fix for improper permission handling in the Page translation API endpoint:
Justification
These upstream references provide maintainer-controlled evidence for the patched versions across Wagtail's supported release branches. They improve the advisory's traceability and make it easier for developers and security researchers to verify the available security fixes.
Scope: Reference-only improvement. No changes to the affected package, vulnerable or patched version ranges, vulnerability description, CWE classification, severity, or CVSS scoring.