ZV-2026-1235 · 2026-09-20 · osv-advisory.caseyjhand.com
osv-advisory.caseyjhand.com: Type of severityLabel on osv_get_vulnerability changed unset → string|null.
breaking
What changed
Type of severityLabel on osv_get_vulnerability changed unset → string|null.
What to do
If your agents call osv-advisory.caseyjhand.com, pin the new snapshot, patch the affected call sites, and let a green contract check confirm the fix. If you don't use the changed tools, nothing is required, but the rest of the ecosystem just learned about it at the same moment you did.
The redline
− unset + string|null osv_get_vulnerability