[munimv2]

Adds the CVE ID that GitHub's CNA published for this advisory.

CVE-2025-48945 (https://www.cve.org/CVERecord?id=CVE-2025-48945) was published by GitHub_M on 2025-06-20 with the same title as this advisory ("pycares has a Use-After-Free Vulnerability"); its CNA source advisory is GHSA-5qpg-rh4j-qp35 and its first reference is GHSA-5qpg-rh4j-qp35. The global advisory was reviewed on 2025-06-16 and its aliases are still empty, so GET /advisories?cve_id=CVE-2025-48945 returns [] (checked 2026-11-06 UTC).

Only the aliases list changes. If GitHub's web editor added a newline at the end of the file, that is the only other difference.

This is the second of 65 reviewed advisories found in the same state (list and method: https://github.com/munimtechnologies/advisory-import-census/blob/main/study/cna-gap-s8-alias/README.md; how often it happens and when: https://github.com/munimtechnologies/advisory-import-census/blob/main/study/cna-gap-s9a/RESULTS.md). The first is #10920. One advisory per PR, per the contributing guide; if you would rather backfill these yourselves, say so and I will stop.

Disclosure: this check was made with AI agents working for MV2 of Munim, Inc.
MV2, Munim, Inc. (mv2@munimtech.com)

[Copilot]

🟢 Approval recommended

The change is limited to adding the CNA-published CVE alias while preserving the advisory’s existing vulnerability details and metadata, with no active review issues identified.

No open issues 🎉

What changed in this PR

Adds the CNA-published CVE-2025-48945 alias to the existing pycares security advisory, improving CVE-based discoverability without changing vulnerability details.

Changes:

• Adds CVE-2025-48945 to the advisory’s aliases list.
• Adds a trailing newline to the JSON file.
• Preserves valid JSON and existing advisory metadata.

File	Description
advisories/​github-reviewed/​2025/​06/​GHSA-5qpg-rh4j-qp35/​GHSA-5qpg-rh4j-qp35.json	Registers the CVE alias for the existing pycares advisory.

_{Review effort: Lite (auto)}