[ranjiGT]

Updates

• References

Comments

Reason for Change

Add the official upstream Decidim v0.32.0 security-release reference to this advisory.

Supporting Evidence

The official Decidim v0.32.0 release notes explicitly document the security fix associated with CVE-2026-44282 / GHSA-9mvp-w4rr-5c6x.

The corresponding upstream fix was implemented in Decidim PR #16659.

Justification

Adding the official release reference provides direct, maintainer-controlled evidence confirming the patched version 0.32.0. It improves traceability and helps developers verify the security fix.

Scope: Reference-only improvement. No changes to the affected package, vulnerable or patched version ranges, vulnerability description, CWE classification, severity, or CVSS scoring.

[github]

Hi there @andreslucena! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

🟢 Approval recommended

The upstream release confirms the advisory’s security fix, and the limited metadata changes introduce no identified issues.

No open issues 🎉

What changed in this PR

Improves traceability for the decidim-elections advisory by linking the official Decidim v0.32.0 release notes, which explicitly identify this security fix.

Changes:

• Adds the upstream release URL as a WEB reference.
• Updates the advisory’s modified timestamp.
• Leaves affected versions, patched versions, vulnerability details, and scoring unchanged.

File	Description
advisories/​github-reviewed/​2026/​09/​GHSA-9mvp-w4rr-5c6x/​GHSA-9mvp-w4rr-5c6x.json	Adds the official release reference and updates the modification timestamp.

_{Review effort: Max}