From 276ed49a85ff8f091c8be47b7d35f790cc114fc5 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 31 Mar 2025 21:57:15 +0000
Subject: [PATCH] Publish GHSA-vqf5-2xx6-9wfm

---
 .../01/GHSA-vqf5-2xx6-9wfm/GHSA-vqf5-2xx6-9wfm.json    | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2025/01/GHSA-vqf5-2xx6-9wfm/GHSA-vqf5-2xx6-9wfm.json b/advisories/github-reviewed/2025/01/GHSA-vqf5-2xx6-9wfm/GHSA-vqf5-2xx6-9wfm.json
index b8037258caf..5a47a75e62c 100644
--- a/advisories/github-reviewed/2025/01/GHSA-vqf5-2xx6-9wfm/GHSA-vqf5-2xx6-9wfm.json
+++ b/advisories/github-reviewed/2025/01/GHSA-vqf5-2xx6-9wfm/GHSA-vqf5-2xx6-9wfm.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vqf5-2xx6-9wfm",
-  "modified": "2025-01-24T18:44:55Z",
+  "modified": "2025-03-31T21:55:42Z",
   "published": "2025-01-24T18:44:55Z",
   "aliases": [
     "CVE-2025-24362"
@@ -89,6 +89,14 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/github/codeql-action"
+    },
+    {
+      "type": "WEB",
+      "url": "https://news.ycombinator.com/item?id=43527044"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql"
     }
   ],
   "database_specific": {