[ranjiGT]

Updates

• Description

Comments

Summary

The advisory for CVE-2026-50650 (GHSA-2969-4q4w-w5h3) contains an unresolved Microsoft .NET security announcement URL placeholder in its description.

The correct announcement, issue #421, is already included in the advisory's structured References field.

This PR corrects the description URL to point to the existing official Microsoft security announcement.

Changes

Field	Before	After
Description URL	https://github.com/dotnet/announcements/issues/**TBD**	https://github.com/dotnet/announcements/issues/421

Supporting evidence

• Official Microsoft .NET security announcement: Microsoft Security Advisory CVE-2026-50650 | .NET Elevation of Privilege Vulnerability dotnet/announcements#421
• Upstream WPF security advisory: GHSA-2969-4q4w-w5h3
• Microsoft Security Response Center: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650

Technical justification

The existing structured References field identifies the correct Microsoft security announcement, but the description contains an unresolved placeholder instead of the published announcement URL.

Replacing the placeholder improves consistency between the description and the authoritative references and ensures that readers can follow the intended security announcement link.

Scope

This is a description-only correction.

No changes are proposed to the vulnerability details, existing references, affected packages, affected or patched version ranges, severity, or CVSS vector.

[Copilot]

🟢 Approval recommended

The review found no active issues with the advisory URL correction and timestamp update.

No open issues 🎉

What changed in this PR

This pull request corrects the unresolved Microsoft .NET security announcement URL placeholder in the GHSA-2969-4q4w-w5h3 advisory for CVE-2026-50650.

Changes:

• Replaces issues/**TBD** with the official announcement URL ending in issues/421.
• Updates the advisory’s modified timestamp.
• Leaves vulnerability details, affected packages, severity, version ranges, and references unchanged.

File	Description
advisories/​github-reviewed/​2026/​07/​GHSA-2969-4q4w-w5h3/​GHSA-2969-4q4w-w5h3.json	Corrects the announcement URL in the advisory description and updates the modification timestamp.

_{Review effort: Lite (auto)}