Branch: refs/heads/vmassol/security-advisory-decisions Home: https://github.com/xwiki/xwiki-dev-llm Commit: dd14b4ba47c029993c083c5b276fe908e1287071 https://github.com/xwiki/xwiki-dev-llm/commit/dd14b4ba47c029993c083c5b276fe9... Author: Vincent Massol <[email protected]> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki/skills/xwiki-security-advisory/references/affected-products.md M xwiki/skills/xwiki-security-advisory/references/github-advisory.md Log Message: ----------- [Misc] Security advisory skill: settle the distribution and already-public decisions * A distribution (the Jetty/HSQLDB zip, the Debian packages) is named only in the advisory's Impact text, never as a Maven affected product, instead of asking the user. * An already-public vulnerability follows the normal disclosure process: no shorter embargo, no earlier publication. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications