[GHSA-8pxw-9c75-6w56] NeuVector admin account has insecure default password

[holyspectral]

Updates

• Affected products

Comments
The 5.0.0 and 5.4.6 version point to invalid golang module versions. The issue has been fixed in the upstream advisory by changing the type to other GHSA-8pxw-9c75-6w56 .

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates a GitHub-reviewed security advisory JSON by adjusting metadata and the set of affected packages.

Changes:

• Updated the modified timestamp.
• Removed one affected entry for the Go module github.com/neuvector/neuvector (previously introduced: 5.0.0, fixed: 5.4.6).

Comments suppressed due to low confidence (1)

advisories/github-reviewed/2025/08/GHSA-8pxw-9c75-6w56/GHSA-8pxw-9c75-6w56.json:1

• This PR removes an entire affected package entry (for github.com/neuvector/neuvector with a defined introduced/fixed range). If the package is still in scope for GHSA-8pxw-9c75-6w56, this change will make the advisory inaccurate for consumers. Please confirm (with the upstream advisory/source) that this package/range is no longer affected; otherwise re-add the removed affected block.

{

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.