From 8af139679f61a44d2a48cd9ed1cc1c27fcefe2de Mon Sep 17 00:00:00 2001
From: granja <300868711+granjacours697-netizen@users.noreply.github.com>
Date: Wed, 22 Jul 2026 18:21:13 +0200
Subject: [PATCH] Improve GHSA-6q32-hq47-5qq3

---
 .../2024/09/GHSA-6q32-hq47-5qq3/GHSA-6q32-hq47-5qq3.json    | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2024/09/GHSA-6q32-hq47-5qq3/GHSA-6q32-hq47-5qq3.json b/advisories/github-reviewed/2024/09/GHSA-6q32-hq47-5qq3/GHSA-6q32-hq47-5qq3.json
index 8cb20bcae8402..5301870085afd 100644
--- a/advisories/github-reviewed/2024/09/GHSA-6q32-hq47-5qq3/GHSA-6q32-hq47-5qq3.json
+++ b/advisories/github-reviewed/2024/09/GHSA-6q32-hq47-5qq3/GHSA-6q32-hq47-5qq3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6q32-hq47-5qq3",
-  "modified": "2025-01-22T18:44:59Z",
+  "modified": "2025-01-22T18:45:02Z",
   "published": "2024-09-03T20:08:30Z",
   "aliases": [
     "CVE-2024-42471"
@@ -9,10 +9,6 @@
   "summary": "@actions/artifact has an Arbitrary File Write via artifact extraction",
   "details": "### Impact\n\nVersions of `actions/artifact` before 2.1.7 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArtifactPublic`, or `streamExtractExternal` for extracting a specifically crafted artifact that contains path traversal filenames.\n\n### Patches\n\nUpgrade to version 2.1.7 or higher. \n\n### References\n\n- https://snyk.io/research/zip-slip-vulnerability\n- https://github.com/actions/toolkit/pull/1724\n\n### CVE\n\nCVE-2024-42471\n\n### Credits\n\nJustin Taft from Google",
   "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N"
-    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"