You can now edit GitHub Security Advisories after you publish them. This can be helpful if you’ve learned more about the scope or impact of the vulnerability you’re announcing, if the vulnerable version range has changed, or if you have other information you’d like to share as part of the advisory.

Edits of advisories in public repos are reviewed by GitHub. Upon review, we may use the updates to send security alerts to affected repositories and redistribute the advisory and its updates through GitHub Advisory Database, our API, and our Atom feed.