Improve GHSA-cq8v-f236-94qc

simonhollingshead · simonhollingshead · commit 93c120727a78 · 2026-04-18T15:10:14.000+01:00
diff --git a/advisories/github-reviewed/2026/04/GHSA-cq8v-f236-94qc/GHSA-cq8v-f236-94qc.json b/advisories/github-reviewed/2026/04/GHSA-cq8v-f236-94qc/GHSA-cq8v-f236-94qc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cq8v-f236-94qc",
-  "modified": "2026-04-14T01:03:36Z",
+  "modified": "2026-04-14T01:03:37Z",
   "published": "2026-04-14T01:03:36Z",
   "aliases": [],
   "summary": "Rand is unsound with a custom logger using rand::rng()",
@@ -20,6 +20,25 @@
             {
               "introduced": "0.7.0"
             },
+            {
+              "fixed": "0.8.6"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "rand"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0.9.0"
+            },
             {
               "fixed": "0.9.3"
             }
@@ -44,9 +63,6 @@
             }
           ]
         }
-      ],
-      "versions": [
-        "0.10.0"
       ]
     }
   ],

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"schema_version": "1.4.0",`
`3`	`3`	`"id": "GHSA-cq8v-f236-94qc",`
`4`		`- "modified": "2026-04-14T01:03:36Z",`
	`4`	`+ "modified": "2026-04-14T01:03:37Z",`
`5`	`5`	`"published": "2026-04-14T01:03:36Z",`
`6`	`6`	`"aliases": [],`
`7`	`7`	`"summary": "Rand is unsound with a custom logger using rand::rng()",`
`@@ -20,6 +20,25 @@`
`20`	`20`	`{`
`21`	`21`	`"introduced": "0.7.0"`
`22`	`22`	`},`
	`23`	`+ {`
	`24`	`+ "fixed": "0.8.6"`
	`25`	`+ }`
	`26`	`+ ]`
	`27`	`+ }`
	`28`	`+ ]`
	`29`	`+ },`
	`30`	`+ {`
	`31`	`+ "package": {`
	`32`	`+ "ecosystem": "crates.io",`
	`33`	`+ "name": "rand"`
	`34`	`+ },`
	`35`	`+ "ranges": [`
	`36`	`+ {`
	`37`	`+ "type": "ECOSYSTEM",`
	`38`	`+ "events": [`
	`39`	`+ {`
	`40`	`+ "introduced": "0.9.0"`
	`41`	`+ },`
`23`	`42`	`{`
`24`	`43`	`"fixed": "0.9.3"`
`25`	`44`	`}`
`@@ -44,9 +63,6 @@`
`44`	`63`	`}`
`45`	`64`	`]`
`46`	`65`	`}`
`47`		`- ],`
`48`		`- "versions": [`
`49`		`- "0.10.0"`
`50`	`66`	`]`
`51`	`67`	`}`
`52`	`68`	`],`