Skip to content

Commit 7333d68

Browse files
Sync Collecting Fix Commits: Wed May 20 20:09:25 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent 2052b12 commit 7333d68

6 files changed

Lines changed: 78 additions & 23 deletions

data/fix-commits/advisory-database-b78f1d41.json

Lines changed: 65 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,71 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-QCXH-W3J9-58QR": {
5+
"a117bd30c64fadec6defc5b224a472122747af27": "Publish Advisories\n\nGHSA-qcxh-w3j9-58qr\nGHSA-vf77-8h7g-gghp",
6+
"af4d01b101c717e0dd95103471001d08e1f08fdb": "Publish Advisories\n\nGHSA-8vmx-qmch-mpqg\nGHSA-qcxh-w3j9-58qr",
7+
"520c648d7c37e765d1656bb4eea461655dae45fd": "Publish Advisories\n\nGHSA-46j3-r4pj-4835\nGHSA-qcxh-w3j9-58qr"
8+
},
9+
"GHSA-VF77-8H7G-GGHP": {
10+
"a117bd30c64fadec6defc5b224a472122747af27": "Publish Advisories\n\nGHSA-qcxh-w3j9-58qr\nGHSA-vf77-8h7g-gghp",
11+
"ef3a5567384c4787e6bc1267a949a0561e6f1e6e": "Merge pull request #7518 from github/aruneko-GHSA-vf77-8h7g-gghp",
12+
"0dc85131ff18d05f421c39a7c623748d6883e4c1": "Improve GHSA-vf77-8h7g-gghp"
13+
},
14+
"GHSA-W5HQ-G745-H8PQ": {
15+
"bef98d82c283de65b93b5611b3e586b499622cc8": "Improve GHSA-w5hq-g745-h8pq",
16+
"ad3cdb35dc8b3ae4d475f5cf9e3ac547dd57c36c": "Improve GHSA-w5hq-g745-h8pq",
17+
"8a38fef9a2de1b2a3fe90edfa796302cb94e8e97": "Merge pull request #7553 from julianladisch/julianladisch-GHSA-w5hq-g745-h8pq",
18+
"09369d665be8eb65e21b28d03fec394d3d629348": "Improve GHSA-w5hq-g745-h8pq",
19+
"d299da6ff9d27c6c9b19cddd6b0876c7d6dd5a92": "Publish GHSA-w5hq-g745-h8pq"
20+
},
21+
"GHSA-CCGF-5RWJ-J3HV": {
22+
"00c014b4afacaa0b150ed29a0b6f2477885621ca": "Publish GHSA-ccgf-5rwj-j3hv",
23+
"0fb489f0af02616a409885a4d44973c07c1ba30f": "Publish GHSA-ccgf-5rwj-j3hv"
24+
},
25+
"GHSA-GP95-J463-VV28": {
26+
"a351df1c2ad7c9f7cf88b08600cb44ec793665be": "Publish Advisories\n\nGHSA-gp95-j463-vv28\nGHSA-q23m-vm9r-5745\nGHSA-w9xh-5f39-vq89"
27+
},
28+
"GHSA-Q23M-VM9R-5745": {
29+
"a351df1c2ad7c9f7cf88b08600cb44ec793665be": "Publish Advisories\n\nGHSA-gp95-j463-vv28\nGHSA-q23m-vm9r-5745\nGHSA-w9xh-5f39-vq89"
30+
},
31+
"GHSA-W9XH-5F39-VQ89": {
32+
"a351df1c2ad7c9f7cf88b08600cb44ec793665be": "Publish Advisories\n\nGHSA-gp95-j463-vv28\nGHSA-q23m-vm9r-5745\nGHSA-w9xh-5f39-vq89"
33+
},
34+
"GHSA-59FH-9F3P-7M39": {
35+
"fec4c3ed67f61a0de2f48fca244cce9a4c9ca301": "Publish Advisories\n\nGHSA-59fh-9f3p-7m39\nGHSA-9qv9-8xv6-5p35\nGHSA-c2c9-mfw7-p8hw\nGHSA-xvp4-phqj-cjr3"
36+
},
37+
"GHSA-9QV9-8XV6-5P35": {
38+
"fec4c3ed67f61a0de2f48fca244cce9a4c9ca301": "Publish Advisories\n\nGHSA-59fh-9f3p-7m39\nGHSA-9qv9-8xv6-5p35\nGHSA-c2c9-mfw7-p8hw\nGHSA-xvp4-phqj-cjr3"
39+
},
40+
"GHSA-C2C9-MFW7-P8HW": {
41+
"fec4c3ed67f61a0de2f48fca244cce9a4c9ca301": "Publish Advisories\n\nGHSA-59fh-9f3p-7m39\nGHSA-9qv9-8xv6-5p35\nGHSA-c2c9-mfw7-p8hw\nGHSA-xvp4-phqj-cjr3"
42+
},
43+
"GHSA-XVP4-PHQJ-CJR3": {
44+
"fec4c3ed67f61a0de2f48fca244cce9a4c9ca301": "Publish Advisories\n\nGHSA-59fh-9f3p-7m39\nGHSA-9qv9-8xv6-5p35\nGHSA-c2c9-mfw7-p8hw\nGHSA-xvp4-phqj-cjr3"
45+
},
46+
"GHSA-337M-MW94-2V6G": {
47+
"adf4835fc0576a97e285b636f07ade80f98f7255": "Publish Advisories\n\nGHSA-337m-mw94-2v6g\nGHSA-m837-xvxr-vqwg\nGHSA-mw8f-w6p8-xrf4",
48+
"5f0ed1cc5f971b532a8f66560fc3e972a4d4a912": "Publish Advisories\n\nGHSA-j666-j6hj-fpc7\nGHSA-xxmc-fm3p-q3x8\nGHSA-337m-mw94-2v6g\nGHSA-6g4r-8638-677q\nGHSA-8cw5-3v42-mc6r\nGHSA-8j5g-5398-wgwq\nGHSA-fh2w-3fv3-7vw2\nGHSA-q88p-27gr-q4g5\nGHSA-qgc2-9f9f-gp28"
49+
},
50+
"GHSA-M837-XVXR-VQWG": {
51+
"adf4835fc0576a97e285b636f07ade80f98f7255": "Publish Advisories\n\nGHSA-337m-mw94-2v6g\nGHSA-m837-xvxr-vqwg\nGHSA-mw8f-w6p8-xrf4"
52+
},
53+
"GHSA-MW8F-W6P8-XRF4": {
54+
"adf4835fc0576a97e285b636f07ade80f98f7255": "Publish Advisories\n\nGHSA-337m-mw94-2v6g\nGHSA-m837-xvxr-vqwg\nGHSA-mw8f-w6p8-xrf4"
55+
},
56+
"GHSA-7WX4-6VFF-V64P": {
57+
"ddbc37b9db136e253f4a9fde23553e31ee7b55c8": "Publish Advisories\n\nGHSA-7wx4-6vff-v64p\nGHSA-fvvm-949w-qj4w\nGHSA-pqwm-q9pv-ph8r"
58+
},
59+
"GHSA-FVVM-949W-QJ4W": {
60+
"ddbc37b9db136e253f4a9fde23553e31ee7b55c8": "Publish Advisories\n\nGHSA-7wx4-6vff-v64p\nGHSA-fvvm-949w-qj4w\nGHSA-pqwm-q9pv-ph8r"
61+
},
62+
"GHSA-PQWM-Q9PV-PH8R": {
63+
"ddbc37b9db136e253f4a9fde23553e31ee7b55c8": "Publish Advisories\n\nGHSA-7wx4-6vff-v64p\nGHSA-fvvm-949w-qj4w\nGHSA-pqwm-q9pv-ph8r"
64+
},
65+
"GHSA-G868-J3QM-4J28": {
66+
"1e18d232cf506608523290ff7f062c593b8214f7": "Improve GHSA-g868-j3qm-4j28",
67+
"411d5c1f460c87a4d44f6aa0da43ea3a646d9879": "Improve GHSA-g868-j3qm-4j28"
68+
},
469
"GHSA-574F-3G2M-X479": {
570
"b8845b50d507a95120d80e081f7023bb8dda415a": "Improve GHSA-574f-3g2m-x479"
671
},
@@ -26,9 +91,6 @@
2691
"GHSA-V348-VR4Q-FV9P": {
2792
"8cd26ca3257bd3badb038748a94c8be5e11b15bb": "Improve GHSA-v348-vr4q-fv9p"
2893
},
29-
"GHSA-G868-J3QM-4J28": {
30-
"411d5c1f460c87a4d44f6aa0da43ea3a646d9879": "Improve GHSA-g868-j3qm-4j28"
31-
},
3294
"GHSA-C72X-MC2P-WV7X": {
3395
"ca6a0050bc0d86d8bf91e925771d0fc7f592e1e4": "Improve GHSA-c72x-mc2p-wv7x"
3496
},
@@ -2532,9 +2594,6 @@
25322594
"cb4688f90ef177beaf004338dfde7b13e3354fc4": "Publish Advisories\n\nGHSA-9mrx-mqmg-gwj9\nGHSA-2p5v-p767-wqv5\nGHSA-frh9-7wfp-w73p\nGHSA-cm99-m826-vgg7\nGHSA-j666-j6hj-fpc7\nGHSA-xxmc-fm3p-q3x8\nGHSA-3h63-fx68-x5fm\nGHSA-c33v-7hr2-gw69\nGHSA-fqhc-8hwj-969h\nGHSA-gh28-ww79-7h4v\nGHSA-mx57-4jmx-5cvf\nGHSA-qj4w-p892-c352\nGHSA-r396-2q2c-pjhr\nGHSA-r83p-32gc-q9c8\nGHSA-vv9w-vff6-5rx9\nGHSA-vwxw-q9j2-rh5v\nGHSA-wxv8-w48j-r2f4\nGHSA-x3qr-8f53-fg74",
25332595
"7023080d45e8d586fc321fd96b629b31d82a7b89": "Publish Advisories\n\nGHSA-q4hc-vp2m-fr47\nGHSA-4fhm-p86v-hwpx\nGHSA-4m3h-wp5w-5hqh\nGHSA-6p72-283f-crv2\nGHSA-8x34-9q3v-h7g8\nGHSA-c2fm-fx6j-95j7\nGHSA-f5f8-5jp8-vj3c\nGHSA-h5q3-ggp6-vf4c\nGHSA-jx6g-363c-pprr\nGHSA-v5mp-vx4p-jwp6\nGHSA-x3fv-96qh-67m7\nGHSA-xxmc-fm3p-q3x8"
25342596
},
2535-
"GHSA-337M-MW94-2V6G": {
2536-
"5f0ed1cc5f971b532a8f66560fc3e972a4d4a912": "Publish Advisories\n\nGHSA-j666-j6hj-fpc7\nGHSA-xxmc-fm3p-q3x8\nGHSA-337m-mw94-2v6g\nGHSA-6g4r-8638-677q\nGHSA-8cw5-3v42-mc6r\nGHSA-8j5g-5398-wgwq\nGHSA-fh2w-3fv3-7vw2\nGHSA-q88p-27gr-q4g5\nGHSA-qgc2-9f9f-gp28"
2537-
},
25382597
"GHSA-6G4R-8638-677Q": {
25392598
"5f0ed1cc5f971b532a8f66560fc3e972a4d4a912": "Publish Advisories\n\nGHSA-j666-j6hj-fpc7\nGHSA-xxmc-fm3p-q3x8\nGHSA-337m-mw94-2v6g\nGHSA-6g4r-8638-677q\nGHSA-8cw5-3v42-mc6r\nGHSA-8j5g-5398-wgwq\nGHSA-fh2w-3fv3-7vw2\nGHSA-q88p-27gr-q4g5\nGHSA-qgc2-9f9f-gp28"
25402599
},
@@ -7203,12 +7262,6 @@
72037262
"GHSA-WPWW-4QVV-XPV8": {
72047263
"6628b074c8de48dbec4f4925452aa33c9f1bd3ed": "Publish Advisories\n\nGHSA-r374-rxx8-8654\nGHSA-wpww-4qvv-xpv8"
72057264
},
7206-
"GHSA-W5HQ-G745-H8PQ": {
7207-
"ad3cdb35dc8b3ae4d475f5cf9e3ac547dd57c36c": "Improve GHSA-w5hq-g745-h8pq",
7208-
"8a38fef9a2de1b2a3fe90edfa796302cb94e8e97": "Merge pull request #7553 from julianladisch/julianladisch-GHSA-w5hq-g745-h8pq",
7209-
"09369d665be8eb65e21b28d03fec394d3d629348": "Improve GHSA-w5hq-g745-h8pq",
7210-
"d299da6ff9d27c6c9b19cddd6b0876c7d6dd5a92": "Publish GHSA-w5hq-g745-h8pq"
7211-
},
72127265
"GHSA-7WW3-XVF5-CXWM": {
72137266
"dfe7f0059ff5476a868eb77ad04bd61785580c5b": "Publish Advisories\n\nGHSA-7ww3-xvf5-cxwm\nGHSA-8cxw-cc62-q28v\nGHSA-xr49-f4rh-qcjf"
72147267
},
@@ -7648,14 +7701,6 @@
76487701
"3f0a8dd401f5710aad8e640150b993fe491a5f88": "Publish GHSA-563x-q5rq-57qp",
76497702
"2bf881bf5fce478da3942451579792b35c14e2c5": "Publish Advisories\n\nGHSA-563x-q5rq-57qp\nGHSA-69cc-cv78-qc8g\nGHSA-69r9-qgr7-g2wj\nGHSA-8mc5-53m5-3qj2\nGHSA-95jq-rwvf-vjx4\nGHSA-563x-q5rq-57qp\nGHSA-69cc-cv78-qc8g\nGHSA-69r9-qgr7-g2wj\nGHSA-8mc5-53m5-3qj2\nGHSA-95jq-rwvf-vjx4"
76507703
},
7651-
"GHSA-VF77-8H7G-GGHP": {
7652-
"0dc85131ff18d05f421c39a7c623748d6883e4c1": "Improve GHSA-vf77-8h7g-gghp"
7653-
},
7654-
"GHSA-QCXH-W3J9-58QR": {
7655-
"4169edec35a64bf443b34226c519e3b42bb8ff57": "Improve GHSA-qcxh-w3j9-58qr",
7656-
"af4d01b101c717e0dd95103471001d08e1f08fdb": "Publish Advisories\n\nGHSA-8vmx-qmch-mpqg\nGHSA-qcxh-w3j9-58qr",
7657-
"520c648d7c37e765d1656bb4eea461655dae45fd": "Publish Advisories\n\nGHSA-46j3-r4pj-4835\nGHSA-qcxh-w3j9-58qr"
7658-
},
76597704
"GHSA-V638-38FC-RHFV": {
76607705
"c4814b40c5ebb40ab3b13dc353c1d7c24d8fd3fb": "Publish Advisories\n\nGHSA-f5c8-m5vw-rmgq\nGHSA-v638-38fc-rhfv"
76617706
},
@@ -15075,9 +15120,6 @@
1507515120
"GHSA-XRC8-933J-F74C": {
1507615121
"b68d518efd138b4246b7283193f26ef22f4656a0": "Publish Advisories\n\nGHSA-2738-x33m-p89q\nGHSA-fvhw-hg3x-xxxp\nGHSA-gqj9-6pwj-7952\nGHSA-pqp9-2cmp-fx98\nGHSA-v4fr-cg8r-vwm7\nGHSA-r93p-9jjr-wjhj\nGHSA-5w7p-v6h9-q8c5\nGHSA-85hw-hqj5-m956\nGHSA-88cw-hhx8-8crw\nGHSA-ccr7-c63m-8vgm\nGHSA-fx2x-5jph-mxxh\nGHSA-jxwc-xxjw-356x\nGHSA-q5xq-rvph-wwgr\nGHSA-xrc8-933j-f74c"
1507715122
},
15078-
"GHSA-CCGF-5RWJ-J3HV": {
15079-
"0fb489f0af02616a409885a4d44973c07c1ba30f": "Publish GHSA-ccgf-5rwj-j3hv"
15080-
},
1508115123
"GHSA-J9PV-RRCJ-6PFX": {
1508215124
"c333c2ac45bdceef76de3782e6709646eaf8ac5b": "Publish GHSA-j9pv-rrcj-6pfx"
1508315125
},

data/fix-commits/codeql-action-689b8b74.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
{
22
"vcs_url": "https://github.com/github/codeql-action",
33
"vulnerabilities": {
4+
"GHSA-JXXR-4GWJ-5JF2": {
5+
"a134948b87e69d30508cc585ceb2296f899f11e9": "Bump `brace-expansion`\n\nAddress https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2"
6+
},
47
"CVE-2023-0842": {
58
"c2b5d643fdc41c9b28b4930ec55e93dbedf6636d": "Require xml2js `>=0.5.0` to address CVE-2023-0842"
69
}

data/fix-commits/gentoo.git-f7ec53e2.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
{
22
"vcs_url": "https://gitweb.gentoo.org/repo/gentoo.git",
33
"vulnerabilities": {
4+
"CVE-2026-46529": {
5+
"3386a9564b3629ddebcd3c5d951f467ca82162b5": "app-text/evince: patch CVE-2026-46529\n\nBug: https://bugs.gentoo.org/975515\nSigned-off-by: Sam James <sam@gentoo.org>"
6+
},
47
"CVE-2026-41054": {
58
"57607c11ca0bfec89208497dedb093900c95dbee": "sys-apps/haveged: add 1.9.21 to fix CVE-2026-41054\n\nBug: https://bugs.gentoo.org/975496\nSigned-off-by: Agostino Sarubbo <ago@gentoo.org>"
69
},

0 commit comments

Comments
 (0)