Merge pull request #6538 from github/edoardottt-GHSA-4c65-9gqf-4w8h

advisory-database[bot] · web-flow · commit ee43b75f0b3a · 2025-12-11T17:22:17.000Z
diff --git a/advisories/github-reviewed/2025/12/GHSA-4c65-9gqf-4w8h/GHSA-4c65-9gqf-4w8h.json b/advisories/github-reviewed/2025/12/GHSA-4c65-9gqf-4w8h/GHSA-4c65-9gqf-4w8h.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4c65-9gqf-4w8h",
-  "modified": "2025-12-09T22:47:32Z",
+  "modified": "2025-12-09T22:47:34Z",
   "published": "2025-12-09T22:47:32Z",
   "aliases": [
     "CVE-2025-67511"
@@ -47,6 +47,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/aliasrobotics/cai"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself"
     }
   ],
   "database_specific": {

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"schema_version": "1.4.0",`
`3`	`3`	`"id": "GHSA-4c65-9gqf-4w8h",`
`4`		`- "modified": "2025-12-09T22:47:32Z",`
	`4`	`+ "modified": "2025-12-09T22:47:34Z",`
`5`	`5`	`"published": "2025-12-09T22:47:32Z",`
`6`	`6`	`"aliases": [`
`7`	`7`	`"CVE-2025-67511"`
`@@ -47,6 +47,10 @@`
`47`	`47`	`{`
`48`	`48`	`"type": "PACKAGE",`
`49`	`49`	`"url": "https://github.com/aliasrobotics/cai"`
	`50`	`+ },`
	`51`	`+ {`
	`52`	`+ "type": "WEB",`
	`53`	`+ "url": "https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself"`
`50`	`54`	`}`
`51`	`55`	`],`
`52`	`56`	`"database_specific": {`