[arv]

Adds GHSA-j2rg-cf6r-pw56 (High) to the Security list in the 1.11.5 release notes. It was published today and is fixed in 1.11.5.

The intro now says twelve security vulnerabilities and one other way a single row could stop replication, because the numeric crash was one of the two it counted before. The bullet under Fixes stays, since it also covers the wrong integer between 2^53 and 2^63.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
zero-docs	Ready	Preview	Nov 12, 2026 10:13am UTC

[Copilot]

🟡 Changes recommended

The checked-in search index is stale, so the updated advisory and release-summary wording will not be discoverable in published docs search until it is regenerated.

1 open issue

• Regenerate the search index to include the updated advisory and release summary · New

What changed in this PR

Updates the Zero 1.11.5 release notes to document the newly published high-severity numeric-range security advisory and correct the vulnerability and replication-failure counts.

Changes:

• Adds GHSA-j2rg-cf6r-pw56 to the Security section.
• Updates the introduction from eleven to twelve security vulnerabilities.
• Clarifies that one additional single-row condition can stop replication.

File	Description
contents/​docs/​release-notes/​1.11.mdx	Adds the numeric-range security advisory and updates the 1.11.5 security and replication-failure summary.

_{Review effort: Lite}

[Copilot]

🟢 Approval recommended

No active review issues are present, and the release notes and search index updates are consistent with documenting the newly published advisory.

No open issues 🎉

1 resolved since last review

• Regenerate the search index to include the updated advisory and release summary

_{Review effort: Lite}