Sync Collecting Fix Commits: Sun Sep 6 01:45:20 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,83 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-38RG-J8XG-2M77": {
+      "a8760aafdf4262344135c5b2523020bb2ee51e54": "Publish Advisories\n\nGHSA-38rg-j8xg-2m77\nGHSA-3hwr-w7cv-hwc6\nGHSA-6358-p8m7-jxv6\nGHSA-hxm6-fmm7-h7jm\nGHSA-qh73-x3c2-xph4"
+    },
+    "GHSA-3HWR-W7CV-HWC6": {
+      "a8760aafdf4262344135c5b2523020bb2ee51e54": "Publish Advisories\n\nGHSA-38rg-j8xg-2m77\nGHSA-3hwr-w7cv-hwc6\nGHSA-6358-p8m7-jxv6\nGHSA-hxm6-fmm7-h7jm\nGHSA-qh73-x3c2-xph4"
+    },
+    "GHSA-6358-P8M7-JXV6": {
+      "a8760aafdf4262344135c5b2523020bb2ee51e54": "Publish Advisories\n\nGHSA-38rg-j8xg-2m77\nGHSA-3hwr-w7cv-hwc6\nGHSA-6358-p8m7-jxv6\nGHSA-hxm6-fmm7-h7jm\nGHSA-qh73-x3c2-xph4"
+    },
+    "GHSA-HXM6-FMM7-H7JM": {
+      "a8760aafdf4262344135c5b2523020bb2ee51e54": "Publish Advisories\n\nGHSA-38rg-j8xg-2m77\nGHSA-3hwr-w7cv-hwc6\nGHSA-6358-p8m7-jxv6\nGHSA-hxm6-fmm7-h7jm\nGHSA-qh73-x3c2-xph4"
+    },
+    "GHSA-QH73-X3C2-XPH4": {
+      "a8760aafdf4262344135c5b2523020bb2ee51e54": "Publish Advisories\n\nGHSA-38rg-j8xg-2m77\nGHSA-3hwr-w7cv-hwc6\nGHSA-6358-p8m7-jxv6\nGHSA-hxm6-fmm7-h7jm\nGHSA-qh73-x3c2-xph4"
+    },
+    "GHSA-MQWG-3R95-5RHW": {
+      "61cbb91bcf6891fac9074755fd102e8da1773f88": "Publish GHSA-mqwg-3r95-5rhw"
+    },
+    "GHSA-F22V-GFQF-P8F3": {
+      "37dd34192eb3a0ffb23c1bf1a9c2970f3457a8b8": "Improve GHSA-f22v-gfqf-p8f3",
+      "af3b6df7a239d4a1796114d2007fc7bc4f22b20b": "Publish Advisories\n\nGHSA-8646-j5j9-6r62\nGHSA-f22v-gfqf-p8f3"
+    },
+    "GHSA-8V8X-CX79-35W7": {
+      "30e32fe2ed45cc8e5bb4368a6a7140a8d523beb0": "Improve GHSA-8v8x-cx79-35w7",
+      "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
+      "4c1be0a0f3f1c6ec93b1cd40971efea4ae4f2dd0": "Publish Advisories\n\nGHSA-4jj9-cgqc-x9h5\nGHSA-83jg-m2pm-4jxj\nGHSA-8v8x-cx79-35w7\nGHSA-jf52-3f2h-h9j5"
+    },
+    "GHSA-2C9F-8WHQ-V3FC": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-6425-CJXV-52GP": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-6Q2X-6FHJ-R3W8": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-9X6X-W4XQ-RW3G": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-CQ44-X9VF-FPQG": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-HJ63-3GGP-WCJ8": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-J9WG-77FW-F22F": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-M7Q3-CWH2-FFG5": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-PQP3-GJGF-83CF": {
+      "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"
+    },
+    "GHSA-2XR5-28GV-34J3": {
+      "83a83c8504b7162079743a3e6d0470250ad0ad9b": "Publish Advisories\n\nGHSA-2xr5-28gv-34j3\nGHSA-5r9v-8527-q4jv\nGHSA-f2rh-ff9r-fh4j\nGHSA-r2j4-mj7w-mgg2\nGHSA-r94p-pw8f-8cwv\nGHSA-w3r6-8g24-54m5"
+    },
+    "GHSA-5R9V-8527-Q4JV": {
+      "83a83c8504b7162079743a3e6d0470250ad0ad9b": "Publish Advisories\n\nGHSA-2xr5-28gv-34j3\nGHSA-5r9v-8527-q4jv\nGHSA-f2rh-ff9r-fh4j\nGHSA-r2j4-mj7w-mgg2\nGHSA-r94p-pw8f-8cwv\nGHSA-w3r6-8g24-54m5"
+    },
+    "GHSA-F2RH-FF9R-FH4J": {
+      "83a83c8504b7162079743a3e6d0470250ad0ad9b": "Publish Advisories\n\nGHSA-2xr5-28gv-34j3\nGHSA-5r9v-8527-q4jv\nGHSA-f2rh-ff9r-fh4j\nGHSA-r2j4-mj7w-mgg2\nGHSA-r94p-pw8f-8cwv\nGHSA-w3r6-8g24-54m5"
+    },
+    "GHSA-R2J4-MJ7W-MGG2": {
+      "83a83c8504b7162079743a3e6d0470250ad0ad9b": "Publish Advisories\n\nGHSA-2xr5-28gv-34j3\nGHSA-5r9v-8527-q4jv\nGHSA-f2rh-ff9r-fh4j\nGHSA-r2j4-mj7w-mgg2\nGHSA-r94p-pw8f-8cwv\nGHSA-w3r6-8g24-54m5"
+    },
+    "GHSA-R94P-PW8F-8CWV": {
+      "83a83c8504b7162079743a3e6d0470250ad0ad9b": "Publish Advisories\n\nGHSA-2xr5-28gv-34j3\nGHSA-5r9v-8527-q4jv\nGHSA-f2rh-ff9r-fh4j\nGHSA-r2j4-mj7w-mgg2\nGHSA-r94p-pw8f-8cwv\nGHSA-w3r6-8g24-54m5"
+    },
+    "GHSA-W3R6-8G24-54M5": {
+      "83a83c8504b7162079743a3e6d0470250ad0ad9b": "Publish Advisories\n\nGHSA-2xr5-28gv-34j3\nGHSA-5r9v-8527-q4jv\nGHSA-f2rh-ff9r-fh4j\nGHSA-r2j4-mj7w-mgg2\nGHSA-r94p-pw8f-8cwv\nGHSA-w3r6-8g24-54m5"
+    },
+    "GHSA-3CGP-3XVW-98X8": {
+      "a07a1d4dfc81f822254d9dddfafce380e1e5b8c6": "Improve GHSA-3cgp-3xvw-98x8",
+      "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
+      "0f863a8bbfbeda583e5d38d6565914ac0d989f44": "Publish Advisories\n\nGHSA-hxp3-63hc-5366\nGHSA-3cgp-3xvw-98x8\nGHSA-9583-h5hc-x8cw"
+    },
     "GHSA-6GMQ-8VP8-GCM6": {
       "0545b1d82152a76ba35ce9d7d473fd63e34e9944": "Improve GHSA-6gmq-8vp8-gcm6",
       "ef264035cc7d616bb5bd5a3cac5042bb3cec12a8": "Publish Advisories\n\nGHSA-5gh2-94qg-qppq\nGHSA-6gmq-8vp8-gcm6"
@@ -27487,9 +27564,6 @@
     "GHSA-8646-J5J9-6R62": {
       "af3b6df7a239d4a1796114d2007fc7bc4f22b20b": "Publish Advisories\n\nGHSA-8646-j5j9-6r62\nGHSA-f22v-gfqf-p8f3"
     },
-    "GHSA-F22V-GFQF-P8F3": {
-      "af3b6df7a239d4a1796114d2007fc7bc4f22b20b": "Publish Advisories\n\nGHSA-8646-j5j9-6r62\nGHSA-f22v-gfqf-p8f3"
-    },
     "GHSA-CJQG-RQ2H-2FVJ": {
       "43b6a5a971c8164fdab3faf2305c6d67ea40fec4": "Publish GHSA-cjqg-rq2h-2fvj"
     },
@@ -60979,10 +61053,6 @@
       "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
       "963a469a2f96c7ffccfa346cdff453d9aba701b7": "Publish GHSA-2w69-qvjg-hvjx"
     },
-    "GHSA-3CGP-3XVW-98X8": {
-      "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
-      "0f863a8bbfbeda583e5d38d6565914ac0d989f44": "Publish Advisories\n\nGHSA-hxp3-63hc-5366\nGHSA-3cgp-3xvw-98x8\nGHSA-9583-h5hc-x8cw"
-    },
     "GHSA-4F6G-68PF-7VHV": {
       "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
       "199636e7fdc99fbda7c1e7e6bfb2193f76a2a5fa": "Publish Advisories\n\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg"
@@ -60994,10 +61064,6 @@
     "GHSA-5FP7-G646-CCF4": {
       "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj"
     },
-    "GHSA-8V8X-CX79-35W7": {
-      "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
-      "4c1be0a0f3f1c6ec93b1cd40971efea4ae4f2dd0": "Publish Advisories\n\nGHSA-4jj9-cgqc-x9h5\nGHSA-83jg-m2pm-4jxj\nGHSA-8v8x-cx79-35w7\nGHSA-jf52-3f2h-h9j5"
-    },
     "GHSA-9583-H5HC-X8CW": {
       "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
       "0f863a8bbfbeda583e5d38d6565914ac0d989f44": "Publish Advisories\n\nGHSA-hxp3-63hc-5366\nGHSA-3cgp-3xvw-98x8\nGHSA-9583-h5hc-x8cw"

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,10 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-84202": {
+      "05eed2466efeb4e5e94b375818809c95e947c4ce": "python3Packages.modelscope: mark CVE-2026-84202 (#560326)",
+      "4a6afa6e1ed3c62eb78ae82d163ee42440c68d20": "python3Packages.modelscope: mark CVE-2026-84202\n\nFixes #559073."
+    },
     "CVE-2026-76642": {
       "5d5bc2497de3b24f0fde6c3d56ac057e5d9eebbc": "util-linux: 2.42.2 -> 2.42.3\n\nFixes: CVE-2026-76642\nFixes: CVE-2026-78410\nFixes: CVE-2026-78409\nFixes: CVE-2026-78408\nFixes: GHSA-4558-p62c-vv5v\n(cherry picked from commit 02db679c80b622b0e0311e628e08b76c0b2658fd)",
       "02db679c80b622b0e0311e628e08b76c0b2658fd": "util-linux: 2.42.2 -> 2.42.3\n\nFixes: CVE-2026-76642\nFixes: CVE-2026-78410\nFixes: CVE-2026-78409\nFixes: CVE-2026-78408\nFixes: GHSA-4558-p62c-vv5v"