From 83d4e6b7c1a0430d8ce3fbd910e875c054ee3bbc Mon Sep 17 00:00:00 2001
From: Jean Desulme <jdesulme@gmail.com>
Date: Mon, 19 Oct 2026 17:28:02 -0500
Subject: [PATCH] Improve GHSA-hp3w-g68c-fv3c

---
 .../2026/09/GHSA-hp3w-g68c-fv3c/GHSA-hp3w-g68c-fv3c.json    | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2026/09/GHSA-hp3w-g68c-fv3c/GHSA-hp3w-g68c-fv3c.json b/advisories/github-reviewed/2026/09/GHSA-hp3w-g68c-fv3c/GHSA-hp3w-g68c-fv3c.json
index b0388e9bcaf4..2902e5f51a40 100644
--- a/advisories/github-reviewed/2026/09/GHSA-hp3w-g68c-fv3c/GHSA-hp3w-g68c-fv3c.json
+++ b/advisories/github-reviewed/2026/09/GHSA-hp3w-g68c-fv3c/GHSA-hp3w-g68c-fv3c.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hp3w-g68c-fv3c",
-  "modified": "2026-10-05T23:47:34Z",
+  "modified": "2026-10-05T23:47:35Z",
   "published": "2026-09-24T15:31:31Z",
   "aliases": [
     "CVE-2026-97058"
@@ -9,10 +9,6 @@
   "summary": "sprintf-js vulnerable to denial of service through unbounded precision specifiers",
   "details": "sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.",
   "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
-    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"