Add affected range to GHSA-m3v4-v5gx-7wf5 (openmed)

[faketut]

Improves GHSA-m3v4-v5gx-7wf5 (CVE-2026-47117).

Change

Populate the empty affected block with the PyPI package and patched version.

"affected": [
  {
    "package": {
      "ecosystem": "PyPI",
      "name": "openmed"
    },
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          { "introduced": "0" },
          { "fixed": "1.5.2" }
        ]
      }
    ]
  }
]

Sources

All evidence is already present in the advisory references:

• Vulnerable details: "OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path."
• Fix commit: maziyarpanahi/openmed@98724f6
• Fix PR: Harden privacy-filter remote-code allowlist for 1.5.2 maziyarpanahi/openmed#59
• Release tag: https://github.com/maziyarpanahi/openmed/releases/tag/v1.5.2
• PyPI distribution: https://pypi.org/project/openmed/ (package name matches the GitHub repo)
• CWE-94 / arbitrary code execution via trust_remote_code=True in auto_map model loading

JSON validated with python3 -m json.tool.