[aungzayyanaing]

Updates

• References

Comments
Add the official Rack v3.2.8 release reference. The v3.2.8 changelog lists GHSA-wvg4-6p58-3gh3 in its Security section. No other changes.

[github]

Hi there @samuel-williams-shopify! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

🟢 Approval recommended

No active review issues are present, and the change is limited to adding the official Rack v3.2.8 release reference while preserving the existing advisory metadata.

No open issues 🎉

What changed in this PR

Adds the official Rack v3.2.8 release reference to the existing GHSA advisory for the Rack::Static header_rules bypass.

Changes:

• Added the Rack v3.2.8 GitHub release URL to the advisory references.
• Preserved the existing vulnerability metadata and affected-version information.

File	Description
advisories/​github-reviewed/​2026/​11/​GHSA-wvg4-6p58-3gh3/​GHSA-wvg4-6p58-3gh3.json	Adds the official Rack v3.2.8 release URL to the advisory references.

_{Review effort: Lite (dynamic)}