[GHSA-h738-vh6g-q8gh] Add jsii-diff package and affected range

[yhay81]

Summary

Add the missing jsii-diff npm package metadata and affected range to GHSA-h738-vh6g-q8gh:

• affected: < 1.131.0
• fixed: 1.131.0

Evidence

• The AWS maintainer advisory identifies jsii-diff, the same CVE, and the < 1.131.0 / 1.131.0 boundary.
• AWS Security Bulletin AWS-2026-057 reports the same package and fixed version.
• The fix commit and v1.131.0 release provide the corresponding source and release evidence.

This PR only completes the package/range metadata and adds primary references; it does not add a new vulnerability or reproduction details.

Validation

• Limited to one advisory JSON file
• JSON syntax validated
• OSV schema validation passed
• Searched open and closed pull requests for the advisory ID; no duplicate found

[advisory-database]

Hi @yhay81! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!