From 2705c5078d24acb37c39e64d371642fa01a6316c Mon Sep 17 00:00:00 2001
From: Brendan Hogan <bhogan@mitre.org>
Date: Mon, 26 Jan 2026 17:43:13 -0500
Subject: [PATCH] add plotly R fix version and reference

---
 vulns/plotly/RSEC-2025-1.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/vulns/plotly/RSEC-2025-1.yaml b/vulns/plotly/RSEC-2025-1.yaml
index 50d8a5d..6c6f617 100644
--- a/vulns/plotly/RSEC-2025-1.yaml
+++ b/vulns/plotly/RSEC-2025-1.yaml
@@ -11,6 +11,7 @@ affected:
   - type: ECOSYSTEM
     events:
     - introduced: "2.0.2"
+    - fixed: "4.12.0"
   versions:
   - "2.0.2"
   - "2.0.3"
@@ -43,7 +44,9 @@ references:
   url: https://github.com/plotly/plotly.R/issues/2463
 - type: WEB
   url: https://nvd.nist.gov/vuln/detail/CVE-2023-46308
+- type: WEB
+  url: https://github.com/plotly/plotly.R/pull/2471
 upstream:
 - CVE-2023-46308
 published: "2025-12-23T15:00:00Z"
-modified: "2025-12-26T22:20:00Z"
+modified: "2025-01-26T22:40:00Z"