[aadmathijssen]

Updates

• Affected products
• Source code location
• Summary

Comments
Added:

• Ecosystem and package name
• Affected and patched versions (*)
• Source code location

(*) Even though the CVE states that the affected version if v4.3.2, it would be expected that it was fixed in v4.3.3.
However, the fix is found in v4.3.4, as part of commit 8457725, the diff of the Block/Post/RelatedProduct.php file to be precise.

Updated:

• Title (the previous title was cut-off and did not contain all relevant information)

[Copilot]

Note

Copilot was unable to run its full agentic suite in this review.

Copilot review overview

1 open issue

• The details field states the issue affects versions \"through 4.3.2\", but the… · New

What changed in this PR

Updates an unreviewed GitHub Security Advisory record to include a human-readable summary, affected package/version range, and an additional reference.

Changes:

• Added summary describing the vulnerability and affected component.
• Populated affected with Packagist package info and an introduced→fixed version range.
• Added an extra repository reference URL and bumped modified timestamp.

File	Description
advisories/​unreviewed/​2026/​09/​GHSA-fwhc-5w96-hjf3/​GHSA-fwhc-5w96-hjf3.json	Enriches advisory metadata (summary, affected range, references) for better package matching and clarity.

_{Review effort: Lite (auto)}