Duplicate Advisory: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)
Low severity
GitHub Reviewed
Published
Oct 23, 2026
to the GitHub Advisory Database
•
Updated Oct 28, 2026
Withdrawn
This advisory was withdrawn on Oct 28, 2026
Give feedback on Dependabot alerts