[GHSA-7p5p-7qq5-cc86] An issue was discovered in pip (all versions) because it...

[joshbressers]

Updates

• Affected products
• References
• Source code location
• Summary

Comments
Update the references to make watching this in the future easier (there's no fix today, and the CVE is disputed)

[CallmeMari]

Hi @joshbressers, thank you for this contribution to GitHub's Advisory Database. I have updated the advisory with the references you provided however, the advisory will still be displayed as unreviewed due to its disputed status with NVD.

[joshbressers]

@CallmeMari Totally. I agree it's a silly advisory. I just wanted to add some references so nobody else had to go digging.

Sadly I couldn't just update the references via the form, so I updated things until it let me submit :)

[CallmeMari]

@joshbressers thanks for understanding! We learned that the advisory couldn't update the links either unfortunately, due to it being in unreviewed status.

[taladrane]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.