[GHSA-r8cr-4f9w-7r75] Correct Netmaker patched version

[tayfuryldz]

Summary

Corrects the first patched version for GHSA-r8cr-4f9w-7r75 from 1.5.0 to 1.5.1 and adds the exact upstream remediation commit.

Evidence

• Tag v1.5.0 still contains the vulnerable sqliteDeleteRecord implementation: the key is interpolated directly into the DELETE statement.
• Commit 32478bd6e021956d31dafc6ee48ec0ba67284631 changes that exact function to use a ? bind parameter and statement.Exec(key); its commit message explicitly identifies SQL injection prevention.
• That fix commit is not an ancestor of v1.5.0.
• The fix commit is an ancestor of v1.5.1, whose sqliteDeleteRecord contains the parameterized implementation.
• The stale v1.5.0 release reference is replaced with the fix commit and v1.5.1 release reference.

No severity, CWE, package, vulnerability description, or introduced-version metadata is changed.

Validation

• JSON parse: pass
• git diff --check: pass
• One advisory file changed
• No open competing PR for this GHSA immediately before submission

AI-assisted metadata curation based solely on already-public upstream history; no new vulnerability disclosure or exploit reproduction is claimed.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.