[GHSA-ccg5-9c8w-xh6v] Add sqladmin 0.27.1 fix commit

[SebTardif]

Add the published sqladmin 0.27.1 fix commit on the existing reviewed advisory GHSA-ccg5-9c8w-xh6v.

Problem

The global record already has fixed: 0.27.1 and the 0.27.1 release tag. A release tag is not a substitute for the security commit. Downstream readers cannot jump to the code change that enforces column_sortable_list.

Change

One file: advisories/github-reviewed/2026/09/GHSA-ccg5-9c8w-xh6v/GHSA-ccg5-9c8w-xh6v.json

• Add a WEB reference to the security merge commit 741635f18f93 (Merge commit from fork, names this GHSA, updates sqladmin/models.py).
• Do not add the version-bump commit 65b069a0a1.
• Do not change the affected range. fixed: 0.27.1 is already correct.

Validation

• python3 -m json.tool on the edited file succeeds.
• Commit files are sqladmin/models.py plus tests, matching the advisory (sort_query / column_sortable_list).
• Same reference shape as merged #9192 and #9193.

Related

• Repo advisory: GHSA-ccg5-9c8w-xh6v
• CVE-2026-54529
• Recent sibling: #9376 (add upstream fix reference)

[Copilot]

🟢 Approval recommended

No unresolved issues remain.

Pull request overview

Adds the upstream SQLAdmin 0.27.1 security fix commit reference to the existing advisory.

Changes:

• Adds commit 741635f18f93 as a WEB reference.
• Updates the modification timestamp.
• Preserves the existing fixed: 0.27.1 range.

File summaries

File	Description
advisories/github-reviewed/2026/09/GHSA-ccg5-9c8w-xh6v/GHSA-ccg5-9c8w-xh6v.json	Adds the upstream fix commit reference.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 0
• Review effort level: Lite (auto)

Note

Copilot is running an experiment and ran this review at Lite.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.