rhdh-overlay-cve-export

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime ingests outsider-authored free text from PR titles/bodies fetched via gh (i.e., fetchPr() → pr.body/pr.title → parsePrBodyAssociations()/pairLineAssociations() in scripts/compute-plugin-package-overlay-cve-list.mjs), which is then used for CVE/Jira extraction without requiring prior selection of a specific item.