Google OSV scanner is still reporting CVE-2026-49283 and CVE-2026-49289 for v4.19.3 (simplesamlphp/saml2)

[HdeBruijnDeveloper]

According to page GHSA-5cjr-mxj5-wmrx the CVE CVE-2026-49289 is fixed in v4.19.3.
Same applies for CVE-2026-49283, see GHSA-6929-8p9f-26jx

But there is no mentioning of these fixes on GHSA-5cjr-mxj5-wmrx and GHSA-6929-8p9f-26jx

After updating the package to v4.19.3 in our project both CVE's are still reported by the OSV Scanner

Should v4.19.3 be added to both pages GHSA-5cjr-mxj5-wmrx and GHSA-6929-8p9f-26jx?

If so can this be done?

[tvdijen]

Yes, I've already requested these changes to the advisory, but they have to go through GitHub's security team:

github/advisory-database#8519
github/advisory-database#8518

It may take a day or two

[HdeBruijnDeveloper]

Thank you so much! Met vriendelijke groet, Hans de Bruijn Op wo 8 jul 2026, 00:11 schreef Tim van Dijen ***@***.***>:

…

*tvdijen* left a comment (simplesamlphp/saml2#420) <#420 (comment)> Yes, I've already requested these changes to the advisory, but they have to go through GitHub's security team: github/advisory-database#8519 <github/advisory-database#8519> github/advisory-database#8518 <github/advisory-database#8518> It may take a day or two — Reply to this email directly, view it on GitHub <#420?email_source=notifications&email_token=AIZMS65LDMEUNH32KDN5QUL5DVYPNA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJQHE2TAMRRHA4KM4TFMFZW63VGMF2XI2DPOKSWK5TFNZ2KYZTPN52GK4S7MNWGSY3L#issuecomment-4909502188>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AIZMS66Z6QEYVSLWIKCZ66L5DVYPNAVCNFSNUABEKJSXA33TNF2G64TZHMYTIMJTHE4DKMR3JFZXG5LFHM2DQMRZGQ2TINJSGOQXMAQ> . Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS <https://github.com/notifications/mobile/ios/AIZMS64QNT6WPRCASPO4OIT5DVYPNA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJQHE2TAMRRHA4KM4TFMFZW63VGMF2XI2DPOKSWK5TFNZ2KUZTPN52GK4S7NFXXG> and Android <https://github.com/notifications/mobile/android/AIZMS62X7IV4GAA5CSDOAEL5DVYPNA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIOJQHE2TAMRRHA4KM4TFMFZW63VGMF2XI2DPOKSWK5TFNZ2K4ZTPN52GK4S7MFXGI4TPNFSA>. Download it today! You are receiving this because you authored the thread.Message ID: ***@***.***>