Skip to content

Commit 2e8f32e

Browse files
aboutcode-automationaboutcode-automation
committed
Sync Collecting Fix Commits: Fri May 22 02:01:10 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent 5055fa8 commit 2e8f32e

10 files changed

Lines changed: 240 additions & 7 deletions

‎data/fix-commits/advisory-database-b78f1d41.json‎

Lines changed: 189 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,189 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-94JR-7PQP-XHCQ": {
5+
"4b9c8f1c0382deb0102612c500e24093d5208d6c": "Publish Advisories\n\nGHSA-94jr-7pqp-xhcq\nGHSA-j3vx-cx2r-pvg8",
6+
"453b9bc8ed7c44ad9cf3f4e5633b68a6dade36b2": "Merge pull request #7597 from waveywaves/fix-GHSA-94jr-7pqp-xhcq-multi-branch-patches",
7+
"69d0b01f1bf9ab80640c53fae52703dc075f91d1": "[GHSA-94jr-7pqp-xhcq] Add multi-branch patch ranges for Tekton Pipelines\n\nGit Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE (CVE-2026-40938) was patched across five maintained LTS branches on\nApril 21, 2026, but the OSV entry here collapses the fix into a single\nrange. Users on patched LTS releases (v1.0.2, v1.3.4, v1.6.2, v1.9.3)\nare incorrectly flagged as vulnerable by dependency tooling.\n\nUpdated to use one OSV range per branch so each patched version is\nrecognized as fixed: v1.0.2, v1.3.4, v1.6.2, v1.9.3, v1.11.1.\n\nSource: https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq",
8+
"e6f0c194619f5ce8be77db0605acf4e99c6ef1f4": "Publish GHSA-94jr-7pqp-xhcq"
9+
},
10+
"GHSA-J3VX-CX2R-PVG8": {
11+
"4b9c8f1c0382deb0102612c500e24093d5208d6c": "Publish Advisories\n\nGHSA-94jr-7pqp-xhcq\nGHSA-j3vx-cx2r-pvg8"
12+
},
13+
"GHSA-F396-4RP4-7V2J": {
14+
"a5e5928412fc872b3d648ed9272a794025fc2757": "Publish Advisories\n\nGHSA-f396-4rp4-7v2j\nGHSA-g6ww-w5j2-r7x3"
15+
},
16+
"GHSA-G6WW-W5J2-R7X3": {
17+
"a5e5928412fc872b3d648ed9272a794025fc2757": "Publish Advisories\n\nGHSA-f396-4rp4-7v2j\nGHSA-g6ww-w5j2-r7x3"
18+
},
19+
"GHSA-QV2Q-C278-PCH5": {
20+
"7fe39a8c3cc1d79dc03caa3f59fe1c2d57b45617": "Publish GHSA-qv2q-c278-pch5"
21+
},
22+
"GHSA-VF33-6R7X-66XX": {
23+
"7bde9b413b6bfd4291ba7f25b31f504f1f07da19": "Publish GHSA-vf33-6r7x-66xx"
24+
},
25+
"GHSA-JQQ5-8PX3-9M6M": {
26+
"c2a8d215d99598c76da7324e8ccd8db2d8d6672d": "Publish Advisories\n\nGHSA-jqq5-8px3-9m6m\nGHSA-x7j8-49r8-mr43"
27+
},
28+
"GHSA-X7J8-49R8-MR43": {
29+
"c2a8d215d99598c76da7324e8ccd8db2d8d6672d": "Publish Advisories\n\nGHSA-jqq5-8px3-9m6m\nGHSA-x7j8-49r8-mr43"
30+
},
31+
"GHSA-4F8R-922H-2VGV": {
32+
"7377f329fad2930cdc9400db8026445ad72d91de": "Publish Advisories\n\nGHSA-4f8r-922h-2vgv\nGHSA-fqw6-gf59-qr4w"
33+
},
34+
"GHSA-FQW6-GF59-QR4W": {
35+
"7377f329fad2930cdc9400db8026445ad72d91de": "Publish Advisories\n\nGHSA-4f8r-922h-2vgv\nGHSA-fqw6-gf59-qr4w"
36+
},
37+
"GHSA-CQP8-FCVH-X7R3": {
38+
"a1f7d866ff522b6e8262ea7664cde2f47f27a190": "Publish GHSA-cqp8-fcvh-x7r3"
39+
},
40+
"GHSA-4J5M-WC25-PVH7": {
41+
"05b7226152ea74b15a8e82160431052b27aa67f2": "Publish GHSA-4j5m-wc25-pvh7"
42+
},
43+
"GHSA-7FXW-R6JV-74C8": {
44+
"10dec6a929ff0af8412a1f157101eaa1299cead9": "Publish Advisories\n\nGHSA-7fxw-r6jv-74c8\nGHSA-jv8m-2544-3pg3"
45+
},
46+
"GHSA-JV8M-2544-3PG3": {
47+
"10dec6a929ff0af8412a1f157101eaa1299cead9": "Publish Advisories\n\nGHSA-7fxw-r6jv-74c8\nGHSA-jv8m-2544-3pg3"
48+
},
49+
"GHSA-24X9-R6Q4-Q93W": {
50+
"b65c7ce0ced863d8d67a64c7900b015f0b41aaf2": "Publish Advisories\n\nGHSA-24x9-r6q4-q93w\nGHSA-35wc-cvqg-78fp\nGHSA-7p85-w9px-jpjp\nGHSA-vcc8-phrv-43wj"
51+
},
52+
"GHSA-35WC-CVQG-78FP": {
53+
"b65c7ce0ced863d8d67a64c7900b015f0b41aaf2": "Publish Advisories\n\nGHSA-24x9-r6q4-q93w\nGHSA-35wc-cvqg-78fp\nGHSA-7p85-w9px-jpjp\nGHSA-vcc8-phrv-43wj"
54+
},
55+
"GHSA-7P85-W9PX-JPJP": {
56+
"b65c7ce0ced863d8d67a64c7900b015f0b41aaf2": "Publish Advisories\n\nGHSA-24x9-r6q4-q93w\nGHSA-35wc-cvqg-78fp\nGHSA-7p85-w9px-jpjp\nGHSA-vcc8-phrv-43wj"
57+
},
58+
"GHSA-VCC8-PHRV-43WJ": {
59+
"b65c7ce0ced863d8d67a64c7900b015f0b41aaf2": "Publish Advisories\n\nGHSA-24x9-r6q4-q93w\nGHSA-35wc-cvqg-78fp\nGHSA-7p85-w9px-jpjp\nGHSA-vcc8-phrv-43wj"
60+
},
61+
"GHSA-4J38-F5CW-54H7": {
62+
"9a0540246c47a4533c9b5c7c40cae01ebaeebc41": "Publish GHSA-4j38-f5cw-54h7"
63+
},
64+
"GHSA-WJXP-XRPV-XPFF": {
65+
"36f398a1e9de023212762b7d9aa7a1d502643850": "Publish Advisories\n\nGHSA-wjxp-xrpv-xpff\nGHSA-qjx8-664m-686j",
66+
"69345b75d4201dc65009b73846fcf2d96b37bfd3": "Merge pull request #7596 from waveywaves/fix-GHSA-wjxp-xrpv-xpff-multi-branch-patches",
67+
"0fcdda1757560ccb74883149256724c58daa5312": "[GHSA-wjxp-xrpv-xpff] Add multi-branch patch ranges for Tekton Pipelines\n\nGit resolver API mode leaks system-configured API token to user-controlled serverURL (CVE-2026-40161) was patched across five maintained LTS branches on\nApril 21, 2026, but the OSV entry here collapses the fix into a single\nrange. Users on patched LTS releases (v1.0.2, v1.3.4, v1.6.2, v1.9.3)\nare incorrectly flagged as vulnerable by dependency tooling.\n\nUpdated to use one OSV range per branch so each patched version is\nrecognized as fixed: v1.0.2, v1.3.4, v1.6.2, v1.9.3, v1.11.1.\n\nSource: https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff",
68+
"ea777bfee271a1b236fa7ae12f9b62235c451f85": "Publish Advisories\n\nGHSA-vp62-r36r-9xqp\nGHSA-wjxp-xrpv-xpff"
69+
},
70+
"GHSA-QJX8-664M-686J": {
71+
"36f398a1e9de023212762b7d9aa7a1d502643850": "Publish Advisories\n\nGHSA-wjxp-xrpv-xpff\nGHSA-qjx8-664m-686j"
72+
},
73+
"GHSA-5H62-F8FG-4W7Q": {
74+
"51210c8397fecbedfd8090b56ccf8d2979aa9c62": "Publish Advisories\n\nGHSA-5h62-f8fg-4w7q\nGHSA-h36g-93qx-rxgr\nGHSA-w42g-jj8w-fj77\nGHSA-wj3q-vw2v-3rj3"
75+
},
76+
"GHSA-H36G-93QX-RXGR": {
77+
"51210c8397fecbedfd8090b56ccf8d2979aa9c62": "Publish Advisories\n\nGHSA-5h62-f8fg-4w7q\nGHSA-h36g-93qx-rxgr\nGHSA-w42g-jj8w-fj77\nGHSA-wj3q-vw2v-3rj3"
78+
},
79+
"GHSA-W42G-JJ8W-FJ77": {
80+
"51210c8397fecbedfd8090b56ccf8d2979aa9c62": "Publish Advisories\n\nGHSA-5h62-f8fg-4w7q\nGHSA-h36g-93qx-rxgr\nGHSA-w42g-jj8w-fj77\nGHSA-wj3q-vw2v-3rj3"
81+
},
82+
"GHSA-WJ3Q-VW2V-3RJ3": {
83+
"51210c8397fecbedfd8090b56ccf8d2979aa9c62": "Publish Advisories\n\nGHSA-5h62-f8fg-4w7q\nGHSA-h36g-93qx-rxgr\nGHSA-w42g-jj8w-fj77\nGHSA-wj3q-vw2v-3rj3"
84+
},
85+
"GHSA-RMQR-H98C-QG2M": {
86+
"7a553189d32f9766a4fd64fef460bc70f2298d1a": "Publish GHSA-rmqr-h98c-qg2m"
87+
},
88+
"GHSA-9R8R-X3VG-6XH4": {
89+
"fce21b4920c41a8f7cfcff2727d5f51ae2aac31a": "Publish GHSA-9r8r-x3vg-6xh4"
90+
},
91+
"GHSA-59F3-7227-WMH4": {
92+
"bd11b60885601dddab1b2e809c1a4ca33729ec3d": "Publish Advisories\n\nGHSA-59f3-7227-wmh4\nGHSA-g9f8-wqj9-fjw5"
93+
},
94+
"GHSA-G9F8-WQJ9-FJW5": {
95+
"bd11b60885601dddab1b2e809c1a4ca33729ec3d": "Publish Advisories\n\nGHSA-59f3-7227-wmh4\nGHSA-g9f8-wqj9-fjw5"
96+
},
97+
"GHSA-2FFM-HXRQ-QQMM": {
98+
"964e76e6376f3d65acaf6ab8e46960f46f2537b7": "Publish Advisories\n\nGHSA-2ffm-hxrq-qqmm\nGHSA-4xrh-5m3m-328w\nGHSA-g43v-9x7q-83pq\nGHSA-gfp8-mp24-5vxg\nGHSA-q2f7-m237-v562"
99+
},
100+
"GHSA-4XRH-5M3M-328W": {
101+
"964e76e6376f3d65acaf6ab8e46960f46f2537b7": "Publish Advisories\n\nGHSA-2ffm-hxrq-qqmm\nGHSA-4xrh-5m3m-328w\nGHSA-g43v-9x7q-83pq\nGHSA-gfp8-mp24-5vxg\nGHSA-q2f7-m237-v562"
102+
},
103+
"GHSA-G43V-9X7Q-83PQ": {
104+
"964e76e6376f3d65acaf6ab8e46960f46f2537b7": "Publish Advisories\n\nGHSA-2ffm-hxrq-qqmm\nGHSA-4xrh-5m3m-328w\nGHSA-g43v-9x7q-83pq\nGHSA-gfp8-mp24-5vxg\nGHSA-q2f7-m237-v562"
105+
},
106+
"GHSA-GFP8-MP24-5VXG": {
107+
"964e76e6376f3d65acaf6ab8e46960f46f2537b7": "Publish Advisories\n\nGHSA-2ffm-hxrq-qqmm\nGHSA-4xrh-5m3m-328w\nGHSA-g43v-9x7q-83pq\nGHSA-gfp8-mp24-5vxg\nGHSA-q2f7-m237-v562"
108+
},
109+
"GHSA-Q2F7-M237-V562": {
110+
"964e76e6376f3d65acaf6ab8e46960f46f2537b7": "Publish Advisories\n\nGHSA-2ffm-hxrq-qqmm\nGHSA-4xrh-5m3m-328w\nGHSA-g43v-9x7q-83pq\nGHSA-gfp8-mp24-5vxg\nGHSA-q2f7-m237-v562"
111+
},
112+
"GHSA-F76X-F9VJ-92JV": {
113+
"2bfaa9b987b324a1e0c7b071f86b0f5d1ba351f5": "Publish Advisories\n\nGHSA-f76x-f9vj-92jv\nGHSA-vr9v-27gg-qgx4\nGHSA-xq32-9g7q-7297"
114+
},
115+
"GHSA-VR9V-27GG-QGX4": {
116+
"2bfaa9b987b324a1e0c7b071f86b0f5d1ba351f5": "Publish Advisories\n\nGHSA-f76x-f9vj-92jv\nGHSA-vr9v-27gg-qgx4\nGHSA-xq32-9g7q-7297"
117+
},
118+
"GHSA-XQ32-9G7Q-7297": {
119+
"2bfaa9b987b324a1e0c7b071f86b0f5d1ba351f5": "Publish Advisories\n\nGHSA-f76x-f9vj-92jv\nGHSA-vr9v-27gg-qgx4\nGHSA-xq32-9g7q-7297"
120+
},
121+
"GHSA-8RWR-F68V-CVW6": {
122+
"21b20132b26d9c45fd2bdb9ba8911d294f1393a0": "Publish Advisories\n\nGHSA-8rwr-f68v-cvw6\nGHSA-chqv-vrj7-qffp"
123+
},
124+
"GHSA-CHQV-VRJ7-QFFP": {
125+
"21b20132b26d9c45fd2bdb9ba8911d294f1393a0": "Publish Advisories\n\nGHSA-8rwr-f68v-cvw6\nGHSA-chqv-vrj7-qffp"
126+
},
127+
"GHSA-2C5X-4JGF-88MJ": {
128+
"518579dc0c3ff31a72736de192bb8223b27c99fc": "Publish Advisories\n\nGHSA-2c5x-4jgf-88mj\nGHSA-99vc-2jx2-688p\nGHSA-9qgr-6vpg-9gh9\nGHSA-cr22-wjx7-2w6m\nGHSA-f74w-272x-mqcv\nGHSA-m5qg-rvjq-727p"
129+
},
130+
"GHSA-99VC-2JX2-688P": {
131+
"518579dc0c3ff31a72736de192bb8223b27c99fc": "Publish Advisories\n\nGHSA-2c5x-4jgf-88mj\nGHSA-99vc-2jx2-688p\nGHSA-9qgr-6vpg-9gh9\nGHSA-cr22-wjx7-2w6m\nGHSA-f74w-272x-mqcv\nGHSA-m5qg-rvjq-727p"
132+
},
133+
"GHSA-9QGR-6VPG-9GH9": {
134+
"518579dc0c3ff31a72736de192bb8223b27c99fc": "Publish Advisories\n\nGHSA-2c5x-4jgf-88mj\nGHSA-99vc-2jx2-688p\nGHSA-9qgr-6vpg-9gh9\nGHSA-cr22-wjx7-2w6m\nGHSA-f74w-272x-mqcv\nGHSA-m5qg-rvjq-727p"
135+
},
136+
"GHSA-CR22-WJX7-2W6M": {
137+
"518579dc0c3ff31a72736de192bb8223b27c99fc": "Publish Advisories\n\nGHSA-2c5x-4jgf-88mj\nGHSA-99vc-2jx2-688p\nGHSA-9qgr-6vpg-9gh9\nGHSA-cr22-wjx7-2w6m\nGHSA-f74w-272x-mqcv\nGHSA-m5qg-rvjq-727p"
138+
},
139+
"GHSA-F74W-272X-MQCV": {
140+
"518579dc0c3ff31a72736de192bb8223b27c99fc": "Publish Advisories\n\nGHSA-2c5x-4jgf-88mj\nGHSA-99vc-2jx2-688p\nGHSA-9qgr-6vpg-9gh9\nGHSA-cr22-wjx7-2w6m\nGHSA-f74w-272x-mqcv\nGHSA-m5qg-rvjq-727p"
141+
},
142+
"GHSA-M5QG-RVJQ-727P": {
143+
"518579dc0c3ff31a72736de192bb8223b27c99fc": "Publish Advisories\n\nGHSA-2c5x-4jgf-88mj\nGHSA-99vc-2jx2-688p\nGHSA-9qgr-6vpg-9gh9\nGHSA-cr22-wjx7-2w6m\nGHSA-f74w-272x-mqcv\nGHSA-m5qg-rvjq-727p"
144+
},
145+
"GHSA-CH4J-VCF5-58X5": {
146+
"2fed27d20747e8516784a858b00e7b363e1e2ac5": "Publish Advisories\n\nGHSA-ch4j-vcf5-58x5\nGHSA-mqcf-gqvg-rmhm"
147+
},
148+
"GHSA-MQCF-GQVG-RMHM": {
149+
"2fed27d20747e8516784a858b00e7b363e1e2ac5": "Publish Advisories\n\nGHSA-ch4j-vcf5-58x5\nGHSA-mqcf-gqvg-rmhm"
150+
},
151+
"GHSA-VJ64-RJF3-W3V7": {
152+
"52c7d251b3fb7e25dc3355a6c17f0de525295969": "Publish Advisories\n\nGHSA-vj64-rjf3-w3v7\nGHSA-vpr4-p6fq-85jc"
153+
},
154+
"GHSA-VPR4-P6FQ-85JC": {
155+
"52c7d251b3fb7e25dc3355a6c17f0de525295969": "Publish Advisories\n\nGHSA-vj64-rjf3-w3v7\nGHSA-vpr4-p6fq-85jc"
156+
},
157+
"GHSA-7PJR-QPVH-M339": {
158+
"b1e5ca4772a700a9826e94f12501f846be5f1ce7": "Publish Advisories\n\nGHSA-7pjr-qpvh-m339\nGHSA-c5fp-p67m-gq56"
159+
},
160+
"GHSA-C5FP-P67M-GQ56": {
161+
"b1e5ca4772a700a9826e94f12501f846be5f1ce7": "Publish Advisories\n\nGHSA-7pjr-qpvh-m339\nGHSA-c5fp-p67m-gq56"
162+
},
163+
"GHSA-3G33-6VG6-27M8": {
164+
"edbadaeafdfcb68039e7710c599f59a01461985a": "Publish Advisories\n\nGHSA-3g33-6vg6-27m8\nGHSA-85g2-pmrx-r49q"
165+
},
166+
"GHSA-85G2-PMRX-R49Q": {
167+
"edbadaeafdfcb68039e7710c599f59a01461985a": "Publish Advisories\n\nGHSA-3g33-6vg6-27m8\nGHSA-85g2-pmrx-r49q"
168+
},
169+
"GHSA-CHF8-4HV6-8PG6": {
170+
"e1b6f5d7224ea0372f34962119540ccc36615379": "Publish GHSA-chf8-4hv6-8pg6"
171+
},
172+
"GHSA-2QJJ-H6WP-C7H7": {
173+
"243b039847a527d4dfcfe1836f2ecc352b7059f1": "Publish GHSA-2qjj-h6wp-c7h7"
174+
},
175+
"GHSA-8RP3-XC6W-5QP5": {
176+
"761c78c7c88ca8893afc16d7aea72aee2aa0cb7e": "Publish GHSA-8rp3-xc6w-5qp5"
177+
},
178+
"GHSA-MW3Q-R9WH-H2FF": {
179+
"8d688e3ea69e83e30f99f937f6ff1c9f738b733d": "Publish GHSA-mw3q-r9wh-h2ff"
180+
},
181+
"GHSA-H9CC-W26M-J342": {
182+
"029dd82c85e04e60954ebb60f830aaf5135d6fa7": "Publish Advisories\n\nGHSA-h9cc-w26m-j342\nGHSA-vghx-352f-93jm"
183+
},
184+
"GHSA-VGHX-352F-93JM": {
185+
"029dd82c85e04e60954ebb60f830aaf5135d6fa7": "Publish Advisories\n\nGHSA-h9cc-w26m-j342\nGHSA-vghx-352f-93jm"
186+
},
4187
"GHSA-75CM-X2W3-8MGF": {
5188
"701afdcaa162b75c7bc31fa583778a77852f2de5": "Publish Advisories\n\nGHSA-75cm-x2w3-8mgf\nGHSA-799f-29jm-gr6c"
6189
},
@@ -7309,6 +7492,12 @@
73097492
"GHSA-XX64-WWV2-HCQQ": {
73107493
"2965e7747fb9057d1a4c5eecff93f19ce626e1ce": "Publish Advisories\n\nGHSA-w65c-cmxj-qrhm\nGHSA-fp55-jw48-c537\nGHSA-xx64-wwv2-hcqq"
73117494
},
7495+
"CVE-2026-40938": {
7496+
"69d0b01f1bf9ab80640c53fae52703dc075f91d1": "[GHSA-94jr-7pqp-xhcq] Add multi-branch patch ranges for Tekton Pipelines\n\nGit Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE (CVE-2026-40938) was patched across five maintained LTS branches on\nApril 21, 2026, but the OSV entry here collapses the fix into a single\nrange. Users on patched LTS releases (v1.0.2, v1.3.4, v1.6.2, v1.9.3)\nare incorrectly flagged as vulnerable by dependency tooling.\n\nUpdated to use one OSV range per branch so each patched version is\nrecognized as fixed: v1.0.2, v1.3.4, v1.6.2, v1.9.3, v1.11.1.\n\nSource: https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
7497+
},
7498+
"CVE-2026-40161": {
7499+
"0fcdda1757560ccb74883149256724c58daa5312": "[GHSA-wjxp-xrpv-xpff] Add multi-branch patch ranges for Tekton Pipelines\n\nGit resolver API mode leaks system-configured API token to user-controlled serverURL (CVE-2026-40161) was patched across five maintained LTS branches on\nApril 21, 2026, but the OSV entry here collapses the fix into a single\nrange. Users on patched LTS releases (v1.0.2, v1.3.4, v1.6.2, v1.9.3)\nare incorrectly flagged as vulnerable by dependency tooling.\n\nUpdated to use one OSV range per branch so each patched version is\nrecognized as fixed: v1.0.2, v1.3.4, v1.6.2, v1.9.3, v1.11.1.\n\nSource: https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff"
7500+
},
73127501
"GHSA-4PVG-PRR3-9CXR": {
73137502
"e6d74239cc7701eaec984e5889f565a8ea881b8f": "Publish Advisories\n\nGHSA-4pvg-prr3-9cxr\nGHSA-8qjv-jj2q-x832"
73147503
},
@@ -8385,9 +8574,6 @@
83858574
"GHSA-VFMQ-68HX-4JFW": {
83868575
"e34b71fc28c153e3f45b5f291e4f4f0e41a1e4ad": "Publish Advisories\n\nGHSA-j687-52p2-xcff\nGHSA-vfmq-68hx-4jfw"
83878576
},
8388-
"GHSA-94JR-7PQP-XHCQ": {
8389-
"e6f0c194619f5ce8be77db0605acf4e99c6ef1f4": "Publish GHSA-94jr-7pqp-xhcq"
8390-
},
83918577
"GHSA-M2CX-GPQF-QF74": {
83928578
"7b976f00ab9ebafbc3ae6e2d31875747708f4c4b": "Publish Advisories\n\nGHSA-m2cx-gpqf-qf74\nGHSA-rx35-6rhx-7858"
83938579
},
@@ -8409,9 +8595,6 @@
84098595
"GHSA-VP62-R36R-9XQP": {
84108596
"ea777bfee271a1b236fa7ae12f9b62235c451f85": "Publish Advisories\n\nGHSA-vp62-r36r-9xqp\nGHSA-wjxp-xrpv-xpff"
84118597
},
8412-
"GHSA-WJXP-XRPV-XPFF": {
8413-
"ea777bfee271a1b236fa7ae12f9b62235c451f85": "Publish Advisories\n\nGHSA-vp62-r36r-9xqp\nGHSA-wjxp-xrpv-xpff"
8414-
},
84158598
"GHSA-6VGR-CP5C-FFX3": {
84168599
"6279934902a0d4a715c536763d773719e238c7e4": "Publish Advisories\n\nGHSA-6vgr-cp5c-ffx3\nGHSA-p49j-v9wc-wg57"
84178600
},

‎data/fix-commits/buildroot-0b809119.json‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
{
22
"vcs_url": "https://github.com/buildroot/buildroot",
33
"vulnerabilities": {
4+
"CVE-2026-41054": {
5+
"c9e36ce80593e3d7e0bd46ffcfcd1b95499e05a8": "package/haveged: security bump version to 1.9.21\n\nhttps://github.com/jirka-h/haveged/blob/v1.9.21/ChangeLog\n\nFixes CVE-2026-41054: https://seclists.org/oss-sec/2026/q2/575\n\"The bug was added in 1.9.3.\"\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
6+
},
47
"CVE-2026-3592": {
58
"5528e00b10c5b98356550585324f775db2e4ea02": "package/bind: security bump to version 9.18.49\n\nRelease notes:\nhttps://ftp.isc.org/isc/bind9/9.18.49/doc/arm/html/notes.html\n\nChangelog:\nhttps://ftp.isc.org/isc/bind9/9.18.49/doc/arm/html/changelog.html\n\nFixes CVE-2026-3592, CVE-2026-3039, CVE-2026-5946, CVE-2026-5950.\n\nFixes bugs:\nGL #5804\nhttps://gitlab.isc.org/isc-projects/bind9/-/issues/5804\nGL #3589\nhttps://gitlab.isc.org/isc-projects/bind9/-/issues/3589\n\nSigned-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>\nSigned-off-by: Arnout Vandecappelle <arnout@rnout.be>"
69
},

0 commit comments

Comments
 (0)