# 对 releases.discourse.org 上报告的安全修复感到困惑

**URL:** https://meta.discourse.org/t/confused-about-security-fixes-as-reported-at-releases-discourse-org/406566
**Category:** Support
**Created:** [2026年七月1日 16:25 UTC](https://meta.discourse.org/t/confused-about-security-fixes-as-reported-at-releases-discourse-org/406566 "2026-07-01T16:25:38Z")
**Posts on this page:** 1
**Showing post:** 5

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [2026年七月2日 13:03 UTC](https://meta.discourse.org/t/confused-about-security-fixes-as-reported-at-releases-discourse-org/406566/5 "2026-07-02T13:03:11Z")

</div>

这将解决问题：

> <https://github.com/discourse/discourse-releases/pull/25>
>
> Previously we would show all security advisories which were 'fixed' during the c…omparison range. Since security fixes are backported, that meant that security advisories would show up in comparisons, even though they were already fixed in the \`startRef\`.
> 
> This commit updates the logic so that we only show security advisories when the 'startRef' is vulnerable, and the 'endRef' is not.

---

_[View the full topic](https://meta.discourse.org/t/confused-about-security-fixes-as-reported-at-releases-discourse-org/406566)._