Sync Collecting Fix Commits: Thu Jul 23 18:40:02 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,106 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-GF47-QGG5-9G9Q": {
+      "069754fd5b85da44823fa5b587f61e5006ad8e94": "Improve GHSA-gf47-qgg5-9g9q",
+      "9bd8bb3206f470d79d7e1879c1aca72b06491432": "Improve GHSA-gf47-qgg5-9g9q"
+    },
+    "GHSA-5XF7-4P34-54QR": {
+      "25ad427cb260813264acc83dfac643f53a339579": "Publish Advisories\n\nGHSA-5xf7-4p34-54qr\nGHSA-g867-7843-wf8q"
+    },
+    "GHSA-G867-7843-WF8Q": {
+      "25ad427cb260813264acc83dfac643f53a339579": "Publish Advisories\n\nGHSA-5xf7-4p34-54qr\nGHSA-g867-7843-wf8q"
+    },
+    "GHSA-57Q6-FVP4-PQMM": {
+      "0ae16a4f0709cdccd52f03d58a514cc9b15c76e9": "Improve GHSA-57q6-fvp4-pqmm",
+      "41538553d488112f9428509c4ba2994aeb987893": "Publish Advisories\n\nGHSA-57q6-fvp4-pqmm\nGHSA-77vg-94rm-hx3p\nGHSA-f776-fp4w-266c\nGHSA-fcjq-435v-jx94\nGHSA-gfm2-xm6c-37qc\nGHSA-gm54-m39w-grjp\nGHSA-r29h-37fj-x2w6"
+    },
+    "GHSA-M4P7-R5RC-7G4J": {
+      "916dbad3450bc54c4834677c03b3b4ccdcfae2fd": "Improve GHSA-m4p7-r5rc-7g4j",
+      "73ac284751e17fef1b5ac58de8febf3e5ceb6f4c": "Publish Advisories\n\nGHSA-8ppf-4f7h-5ppj\nGHSA-h35f-9h28-mq5c\nGHSA-hm4w-wwcw-mr6r\nGHSA-m4p7-r5rc-7g4j"
+    },
+    "GHSA-55H5-XMCQ-C37V": {
+      "a1f79da7d9ace94965a4a6372e679be3d02ffe25": "Publish Advisories\n\nGHSA-55h5-xmcq-c37v\nGHSA-5qjq-93h5-hrgp\nGHSA-6g55-p6wh-862q"
+    },
+    "GHSA-5QJQ-93H5-HRGP": {
+      "a1f79da7d9ace94965a4a6372e679be3d02ffe25": "Publish Advisories\n\nGHSA-55h5-xmcq-c37v\nGHSA-5qjq-93h5-hrgp\nGHSA-6g55-p6wh-862q"
+    },
+    "GHSA-6G55-P6WH-862Q": {
+      "a1f79da7d9ace94965a4a6372e679be3d02ffe25": "Publish Advisories\n\nGHSA-55h5-xmcq-c37v\nGHSA-5qjq-93h5-hrgp\nGHSA-6g55-p6wh-862q"
+    },
+    "GHSA-2MRG-GJXQ-2GVR": {
+      "0028562b44fe8ba49728d9c355cac8b5dcaf39ca": "Publish Advisories\n\nGHSA-2mrg-gjxq-2gvr\nGHSA-xh5m-36r6-47m3"
+    },
+    "GHSA-XH5M-36R6-47M3": {
+      "0028562b44fe8ba49728d9c355cac8b5dcaf39ca": "Publish Advisories\n\nGHSA-2mrg-gjxq-2gvr\nGHSA-xh5m-36r6-47m3"
+    },
+    "GHSA-6HQ5-7373-42RG": {
+      "123118154fab818d818bd2917499bd2c4ff4a757": "Publish GHSA-6hq5-7373-42rg"
+    },
+    "GHSA-8FPG-XM3F-6CX3": {
+      "35b386513e6ac807c6f83557384a4326212a2c7c": "Publish GHSA-8fpg-xm3f-6cx3"
+    },
+    "GHSA-XMF8-CVQR-RFGJ": {
+      "24358dc544a68e7b01076c3b8b3e0b4e427c36ae": "Publish GHSA-xmf8-cvqr-rfgj"
+    },
+    "GHSA-7RQJ-J65F-68WH": {
+      "007470fda55f392c36ad8b3db905db71bacb1fd9": "Publish GHSA-7rqj-j65f-68wh"
+    },
+    "GHSA-X445-F3H2-J279": {
+      "c6718883f559d16b779999cfcc069b85c7ce2083": "Publish GHSA-x445-f3h2-j279"
+    },
+    "GHSA-H8R8-WCCR-V5F2": {
+      "02f8645da3fe19f41743b8c7e65eb8dd4925ff94": "Publish Advisories\n\nGHSA-h8r8-wccr-v5f2\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r",
+      "4bbe1ac707ddd9da0c80ef4892111ca710aa3c74": "Publish Advisories\n\nGHSA-443w-3rq3-5m5h\nGHSA-h8r8-wccr-v5f2"
+    },
+    "GHSA-CJ63-JHHR-WCXV": {
+      "02f8645da3fe19f41743b8c7e65eb8dd4925ff94": "Publish Advisories\n\nGHSA-h8r8-wccr-v5f2\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r",
+      "1ec492b5ad216d00d02ca87af2b5f2a0c0e3f658": "Publish Advisories\n\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r\nGHSA-ffq5-qpvf-xq7x\nGHSA-v529-vhwc-wfc5\nGHSA-w5xj-99cg-rccm",
+      "3ca8e5ac8168b44b26ef477f8f738c6a607b4e0f": "Publish Advisories\n\nGHSA-436g-fhfc-9g5w\nGHSA-cj63-jhhr-wcxv\nGHSA-ghc5-95c2-vwcv"
+    },
+    "GHSA-CJMM-F4JC-QW8R": {
+      "02f8645da3fe19f41743b8c7e65eb8dd4925ff94": "Publish Advisories\n\nGHSA-h8r8-wccr-v5f2\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r",
+      "1ec492b5ad216d00d02ca87af2b5f2a0c0e3f658": "Publish Advisories\n\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r\nGHSA-ffq5-qpvf-xq7x\nGHSA-v529-vhwc-wfc5\nGHSA-w5xj-99cg-rccm",
+      "20adaf7a6a8c0fbe04f16dac6b9766ab49186a63": "Publish Advisories\n\nGHSA-2fr7-cc4f-wh98\nGHSA-6326-w46w-ppjw\nGHSA-cjmm-f4jc-qw8r"
+    },
+    "GHSA-39Q2-94RC-95CP": {
+      "cab47a53355fe3bc502e03be3bcadddb7f126733": "Publish Advisories\n\nGHSA-39q2-94rc-95cp\nGHSA-76mc-f452-cxcm\nGHSA-x4vx-rjvf-j5p4",
+      "007e9d4db974ee4ad0b07af00a95989855582b41": "Publish Advisories\n\nGHSA-39q2-94rc-95cp\nGHSA-47hf-23pw-3m8c\nGHSA-75h4-c557-j89r\nGHSA-jvx4-xv3m-hrj4\nGHSA-vmjj-qr7v-pxm6"
+    },
+    "GHSA-76MC-F452-CXCM": {
+      "cab47a53355fe3bc502e03be3bcadddb7f126733": "Publish Advisories\n\nGHSA-39q2-94rc-95cp\nGHSA-76mc-f452-cxcm\nGHSA-x4vx-rjvf-j5p4",
+      "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
+    },
+    "GHSA-X4VX-RJVF-J5P4": {
+      "cab47a53355fe3bc502e03be3bcadddb7f126733": "Publish Advisories\n\nGHSA-39q2-94rc-95cp\nGHSA-76mc-f452-cxcm\nGHSA-x4vx-rjvf-j5p4",
+      "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
+    },
+    "GHSA-CMWH-PVXP-8882": {
+      "6302e2a02c5ffb4e498b9a183e06b139a1bef05a": "Publish Advisories\n\nGHSA-cmwh-pvxp-8882\nGHSA-gvmj-g25r-r7wr\nGHSA-vxr8-fq34-vvx9",
+      "a96d3ddb4f5fb243e57ad70066d302bc536a7a3a": "Merge pull request #8106 from EchoTydes/michael-GHSA-cmwh-pvxp-8882",
+      "ce0f7470ce0941ef9755ad8b6123489ffe131066": "Add fix references to GHSA-cmwh-pvxp-8882",
+      "cb76881c858cf10c5ced6b84b9dae3188017269a": "Publish Advisories\n\nGHSA-29w3-p9w9-wc47\nGHSA-38rv-x7px-6hhq\nGHSA-4pcv-mg8v-vrgf\nGHSA-5jv7-2mjm-h6qj\nGHSA-6jcq-6546-qrrw\nGHSA-7qw2-w5rc-37x2\nGHSA-8ccj-p46r-jwqq\nGHSA-9752-mhqh-h34f\nGHSA-cmwh-pvxp-8882\nGHSA-cwj8-7gp2-ggcw\nGHSA-f38v-77qj-h4jq\nGHSA-gqmf-56h7-rrpf\nGHSA-h2w2-v7j6-xqm4\nGHSA-j4f3-55x4-r6q2\nGHSA-jm82-fx9c-mx94\nGHSA-jxcw-qp4h-6jfq\nGHSA-p69m-4f92-2v84\nGHSA-p6gq-j5cr-w38f\nGHSA-pr7r-676h-xcf6\nGHSA-q6r4-3wmg-fwcq\nGHSA-v4jc-pm6r-3vj8\nGHSA-vjv9-7m7j-h833\nGHSA-vmh5-mc38-953g\nGHSA-vmmj-pfw7-fjwp"
+    },
+    "GHSA-GVMJ-G25R-R7WR": {
+      "6302e2a02c5ffb4e498b9a183e06b139a1bef05a": "Publish Advisories\n\nGHSA-cmwh-pvxp-8882\nGHSA-gvmj-g25r-r7wr\nGHSA-vxr8-fq34-vvx9",
+      "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
+    },
+    "GHSA-VXR8-FQ34-VVX9": {
+      "6302e2a02c5ffb4e498b9a183e06b139a1bef05a": "Publish Advisories\n\nGHSA-cmwh-pvxp-8882\nGHSA-gvmj-g25r-r7wr\nGHSA-vxr8-fq34-vvx9",
+      "2d0f6b317211c8494d5ae3cafe0cc7491540813f": "Publish Advisories\n\nGHSA-4m7w-qmgq-4wj5\nGHSA-537c-gmf6-5ccf\nGHSA-94rc-8x27-4472\nGHSA-f8h2-vmm9-qhj6\nGHSA-pr59-h9ph-3fr8\nGHSA-vxr8-fq34-vvx9\nGHSA-xcgm-r5h9-7989"
+    },
+    "GHSA-WMQ2-JC9M-XP4M": {
+      "9cd99ebcc11a57344623408498ea0f0ea7700a74": "Improve GHSA-wmq2-jc9m-xp4m",
+      "fbbb8663d4fe38eff3b0204d9814ae535e9567d9": "Publish Advisories\n\nGHSA-2hhc-f86x-x74f\nGHSA-2j5w-cwc3-8hxw\nGHSA-4r39-f4rh-j6q8\nGHSA-4vf2-cm23-rf4c\nGHSA-543w-gq76-pw7g\nGHSA-7fjr-5hph-c2mh\nGHSA-9523-474x-5h36\nGHSA-f5ch-36rg-vfcc\nGHSA-qxh5-5r5p-5gvf\nGHSA-vmvp-2hhx-rgm8\nGHSA-wmq2-jc9m-xp4m\nGHSA-wrqc-q8p5-76m5\nGHSA-x9gc-p2qp-4p7v\nGHSA-7fjr-5hph-c2mh\nGHSA-qxh5-5r5p-5gvf",
+      "458fb882ccd033117475e4435eb8583fa39cff25": "Publish GHSA-wmq2-jc9m-xp4m"
+    },
+    "GHSA-XFQM-J7PC-XRFC": {
+      "a83c10b6b7ed28a387fb92422f4d62f1d0e95781": "Improve GHSA-xfqm-j7pc-xrfc",
+      "629eab5701072903fe4daa329c41cdc921bc7b26": "Publish Advisories\n\nGHSA-hhf6-3xpg-pggx\nGHSA-xfqm-j7pc-xrfc"
+    },
+    "GHSA-73JW-FP74-P77X": {
+      "398226046c08a04004262c7d6aa80fb9a7be6dea": "Improve GHSA-73jw-fp74-p77x"
+    },
     "GHSA-83X2-C529-VX4J": {
       "f29ec039bcfc49be67852b10e639a7367a3f7020": "Improve GHSA-83x2-c529-vx4j"
     },
@@ -808,9 +908,6 @@
     "GHSA-HM4W-WWCW-MR6R": {
       "73ac284751e17fef1b5ac58de8febf3e5ceb6f4c": "Publish Advisories\n\nGHSA-8ppf-4f7h-5ppj\nGHSA-h35f-9h28-mq5c\nGHSA-hm4w-wwcw-mr6r\nGHSA-m4p7-r5rc-7g4j"
     },
-    "GHSA-M4P7-R5RC-7G4J": {
-      "73ac284751e17fef1b5ac58de8febf3e5ceb6f4c": "Publish Advisories\n\nGHSA-8ppf-4f7h-5ppj\nGHSA-h35f-9h28-mq5c\nGHSA-hm4w-wwcw-mr6r\nGHSA-m4p7-r5rc-7g4j"
-    },
     "GHSA-45RX-2JWX-CXFR": {
       "136f8e11918ce66b2191bce34c9fdd746a45739c": "Publish Advisories\n\nGHSA-45rx-2jwx-cxfr\nGHSA-v245-v573-v5vm\nGHSA-vcrf-j523-4mrf"
     },
@@ -11945,9 +12042,6 @@
     "GHSA-8CCJ-P46R-JWQQ": {
       "cb76881c858cf10c5ced6b84b9dae3188017269a": "Publish Advisories\n\nGHSA-29w3-p9w9-wc47\nGHSA-38rv-x7px-6hhq\nGHSA-4pcv-mg8v-vrgf\nGHSA-5jv7-2mjm-h6qj\nGHSA-6jcq-6546-qrrw\nGHSA-7qw2-w5rc-37x2\nGHSA-8ccj-p46r-jwqq\nGHSA-9752-mhqh-h34f\nGHSA-cmwh-pvxp-8882\nGHSA-cwj8-7gp2-ggcw\nGHSA-f38v-77qj-h4jq\nGHSA-gqmf-56h7-rrpf\nGHSA-h2w2-v7j6-xqm4\nGHSA-j4f3-55x4-r6q2\nGHSA-jm82-fx9c-mx94\nGHSA-jxcw-qp4h-6jfq\nGHSA-p69m-4f92-2v84\nGHSA-p6gq-j5cr-w38f\nGHSA-pr7r-676h-xcf6\nGHSA-q6r4-3wmg-fwcq\nGHSA-v4jc-pm6r-3vj8\nGHSA-vjv9-7m7j-h833\nGHSA-vmh5-mc38-953g\nGHSA-vmmj-pfw7-fjwp"
     },
-    "GHSA-CMWH-PVXP-8882": {
-      "cb76881c858cf10c5ced6b84b9dae3188017269a": "Publish Advisories\n\nGHSA-29w3-p9w9-wc47\nGHSA-38rv-x7px-6hhq\nGHSA-4pcv-mg8v-vrgf\nGHSA-5jv7-2mjm-h6qj\nGHSA-6jcq-6546-qrrw\nGHSA-7qw2-w5rc-37x2\nGHSA-8ccj-p46r-jwqq\nGHSA-9752-mhqh-h34f\nGHSA-cmwh-pvxp-8882\nGHSA-cwj8-7gp2-ggcw\nGHSA-f38v-77qj-h4jq\nGHSA-gqmf-56h7-rrpf\nGHSA-h2w2-v7j6-xqm4\nGHSA-j4f3-55x4-r6q2\nGHSA-jm82-fx9c-mx94\nGHSA-jxcw-qp4h-6jfq\nGHSA-p69m-4f92-2v84\nGHSA-p6gq-j5cr-w38f\nGHSA-pr7r-676h-xcf6\nGHSA-q6r4-3wmg-fwcq\nGHSA-v4jc-pm6r-3vj8\nGHSA-vjv9-7m7j-h833\nGHSA-vmh5-mc38-953g\nGHSA-vmmj-pfw7-fjwp"
-    },
     "GHSA-JM82-FX9C-MX94": {
       "cb76881c858cf10c5ced6b84b9dae3188017269a": "Publish Advisories\n\nGHSA-29w3-p9w9-wc47\nGHSA-38rv-x7px-6hhq\nGHSA-4pcv-mg8v-vrgf\nGHSA-5jv7-2mjm-h6qj\nGHSA-6jcq-6546-qrrw\nGHSA-7qw2-w5rc-37x2\nGHSA-8ccj-p46r-jwqq\nGHSA-9752-mhqh-h34f\nGHSA-cmwh-pvxp-8882\nGHSA-cwj8-7gp2-ggcw\nGHSA-f38v-77qj-h4jq\nGHSA-gqmf-56h7-rrpf\nGHSA-h2w2-v7j6-xqm4\nGHSA-j4f3-55x4-r6q2\nGHSA-jm82-fx9c-mx94\nGHSA-jxcw-qp4h-6jfq\nGHSA-p69m-4f92-2v84\nGHSA-p6gq-j5cr-w38f\nGHSA-pr7r-676h-xcf6\nGHSA-q6r4-3wmg-fwcq\nGHSA-v4jc-pm6r-3vj8\nGHSA-vjv9-7m7j-h833\nGHSA-vmh5-mc38-953g\nGHSA-vmmj-pfw7-fjwp"
     },
@@ -12622,9 +12716,6 @@
     "GHSA-F8H2-VMM9-QHJ6": {
       "2d0f6b317211c8494d5ae3cafe0cc7491540813f": "Publish Advisories\n\nGHSA-4m7w-qmgq-4wj5\nGHSA-537c-gmf6-5ccf\nGHSA-94rc-8x27-4472\nGHSA-f8h2-vmm9-qhj6\nGHSA-pr59-h9ph-3fr8\nGHSA-vxr8-fq34-vvx9\nGHSA-xcgm-r5h9-7989"
     },
-    "GHSA-VXR8-FQ34-VVX9": {
-      "2d0f6b317211c8494d5ae3cafe0cc7491540813f": "Publish Advisories\n\nGHSA-4m7w-qmgq-4wj5\nGHSA-537c-gmf6-5ccf\nGHSA-94rc-8x27-4472\nGHSA-f8h2-vmm9-qhj6\nGHSA-pr59-h9ph-3fr8\nGHSA-vxr8-fq34-vvx9\nGHSA-xcgm-r5h9-7989"
-    },
     "GHSA-XCGM-R5H9-7989": {
       "2d0f6b317211c8494d5ae3cafe0cc7491540813f": "Publish Advisories\n\nGHSA-4m7w-qmgq-4wj5\nGHSA-537c-gmf6-5ccf\nGHSA-94rc-8x27-4472\nGHSA-f8h2-vmm9-qhj6\nGHSA-pr59-h9ph-3fr8\nGHSA-vxr8-fq34-vvx9\nGHSA-xcgm-r5h9-7989"
     },
@@ -12655,18 +12746,9 @@
     "GHSA-G8MR-85JM-7XHM": {
       "8f44a6076a6b0d5bd712b76da24249957d71eaa8": "Publish Advisories\n\nGHSA-84g9-w2xq-vcv6\nGHSA-g8mr-85jm-7xhm"
     },
-    "GHSA-76MC-F452-CXCM": {
-      "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
-    },
-    "GHSA-GVMJ-G25R-R7WR": {
-      "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
-    },
     "GHSA-RP9W-3FW7-7CWQ": {
       "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
     },
-    "GHSA-X4VX-RJVF-J5P4": {
-      "f67e2126564dc1e5a960fd01fa3cc6f1d25d9896": "Publish Advisories\n\nGHSA-76mc-f452-cxcm\nGHSA-gvmj-g25r-r7wr\nGHSA-rp9w-3fw7-7cwq\nGHSA-x4vx-rjvf-j5p4"
-    },
     "GHSA-JQ35-7PRP-9V3F": {
       "fdf8ed5197a79d237f4a63ada4a5efc706350cd7": "Publish Advisories\n\nGHSA-993g-76c3-p5m4\nGHSA-jq35-7prp-9v3f\nGHSA-w7vc-732c-9m39\nGHSA-xgmm-8j9v-c9wx"
     },
@@ -18984,14 +19066,6 @@
     "GHSA-RWJR-QJJ3-MQ2F": {
       "03674849ed763862ec4a05988acfeb52a3c707ca": "Publish Advisories\n\nGHSA-87m7-qffr-542v\nGHSA-rwjr-qjj3-mq2f"
     },
-    "GHSA-CJ63-JHHR-WCXV": {
-      "1ec492b5ad216d00d02ca87af2b5f2a0c0e3f658": "Publish Advisories\n\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r\nGHSA-ffq5-qpvf-xq7x\nGHSA-v529-vhwc-wfc5\nGHSA-w5xj-99cg-rccm",
-      "3ca8e5ac8168b44b26ef477f8f738c6a607b4e0f": "Publish Advisories\n\nGHSA-436g-fhfc-9g5w\nGHSA-cj63-jhhr-wcxv\nGHSA-ghc5-95c2-vwcv"
-    },
-    "GHSA-CJMM-F4JC-QW8R": {
-      "1ec492b5ad216d00d02ca87af2b5f2a0c0e3f658": "Publish Advisories\n\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r\nGHSA-ffq5-qpvf-xq7x\nGHSA-v529-vhwc-wfc5\nGHSA-w5xj-99cg-rccm",
-      "20adaf7a6a8c0fbe04f16dac6b9766ab49186a63": "Publish Advisories\n\nGHSA-2fr7-cc4f-wh98\nGHSA-6326-w46w-ppjw\nGHSA-cjmm-f4jc-qw8r"
-    },
     "GHSA-FFQ5-QPVF-XQ7X": {
       "1ec492b5ad216d00d02ca87af2b5f2a0c0e3f658": "Publish Advisories\n\nGHSA-cj63-jhhr-wcxv\nGHSA-cjmm-f4jc-qw8r\nGHSA-ffq5-qpvf-xq7x\nGHSA-v529-vhwc-wfc5\nGHSA-w5xj-99cg-rccm",
       "71d90d7290de8ef2a3619a6799f42fc8b82c5003": "Publish Advisories\n\nGHSA-4jvx-93h3-f45h\nGHSA-ffq5-qpvf-xq7x"
@@ -21795,9 +21869,6 @@
     "GHSA-WWHQ-CX22-F7VV": {
       "07b29c41e7d2f0b705f94bc90a03b82d438e622d": "Publish Advisories\n\nGHSA-3wgj-c2hg-vm6q\nGHSA-4g37-7p2c-38r9\nGHSA-4pcg-253r-rf9w\nGHSA-5gc6-xhv4-2wg6\nGHSA-65pg-qhhw-mxwg\nGHSA-8jjp-r2w2-4v22\nGHSA-8w7q-q5jp-jvgx\nGHSA-cqp4-qqvg-3787\nGHSA-h2cw-7qw9-56xr\nGHSA-jh9g-8jqw-m2qx\nGHSA-m69w-p7m4-585j\nGHSA-p4fx-23fq-jfg6\nGHSA-r472-mw7m-967f\nGHSA-rh5x-h6pp-cjj6\nGHSA-rjmp-vjf2-qf4g\nGHSA-v6qf-75pr-p96m\nGHSA-wwhq-cx22-f7vv\nGHSA-x3qm-p8hr-3c3h"
     },
-    "GHSA-57Q6-FVP4-PQMM": {
-      "41538553d488112f9428509c4ba2994aeb987893": "Publish Advisories\n\nGHSA-57q6-fvp4-pqmm\nGHSA-77vg-94rm-hx3p\nGHSA-f776-fp4w-266c\nGHSA-fcjq-435v-jx94\nGHSA-gfm2-xm6c-37qc\nGHSA-gm54-m39w-grjp\nGHSA-r29h-37fj-x2w6"
-    },
     "GHSA-GFM2-XM6C-37QC": {
       "41538553d488112f9428509c4ba2994aeb987893": "Publish Advisories\n\nGHSA-57q6-fvp4-pqmm\nGHSA-77vg-94rm-hx3p\nGHSA-f776-fp4w-266c\nGHSA-fcjq-435v-jx94\nGHSA-gfm2-xm6c-37qc\nGHSA-gm54-m39w-grjp\nGHSA-r29h-37fj-x2w6"
     },
@@ -28055,9 +28126,6 @@
     "GHSA-GC9W-CC93-RJV8": {
       "4ee53470f0f76bb77a409e3793c9109d9c283cc4": "Publish GHSA-gc9w-cc93-rjv8"
     },
-    "GHSA-39Q2-94RC-95CP": {
-      "007e9d4db974ee4ad0b07af00a95989855582b41": "Publish Advisories\n\nGHSA-39q2-94rc-95cp\nGHSA-47hf-23pw-3m8c\nGHSA-75h4-c557-j89r\nGHSA-jvx4-xv3m-hrj4\nGHSA-vmjj-qr7v-pxm6"
-    },
     "GHSA-47HF-23PW-3M8C": {
       "007e9d4db974ee4ad0b07af00a95989855582b41": "Publish Advisories\n\nGHSA-39q2-94rc-95cp\nGHSA-47hf-23pw-3m8c\nGHSA-75h4-c557-j89r\nGHSA-jvx4-xv3m-hrj4\nGHSA-vmjj-qr7v-pxm6"
     },
@@ -35092,9 +35160,6 @@
     "GHSA-443W-3RQ3-5M5H": {
       "4bbe1ac707ddd9da0c80ef4892111ca710aa3c74": "Publish Advisories\n\nGHSA-443w-3rq3-5m5h\nGHSA-h8r8-wccr-v5f2"
     },
-    "GHSA-H8R8-WCCR-V5F2": {
-      "4bbe1ac707ddd9da0c80ef4892111ca710aa3c74": "Publish Advisories\n\nGHSA-443w-3rq3-5m5h\nGHSA-h8r8-wccr-v5f2"
-    },
     "GHSA-QR99-7898-VR7C": {
       "b974126ca870031b426d85952adfeca9ab47addb": "Publish GHSA-qr99-7898-vr7c"
     },
@@ -71029,9 +71094,6 @@
     "GHSA-HHF6-3XPG-PGGX": {
       "629eab5701072903fe4daa329c41cdc921bc7b26": "Publish Advisories\n\nGHSA-hhf6-3xpg-pggx\nGHSA-xfqm-j7pc-xrfc"
     },
-    "GHSA-XFQM-J7PC-XRFC": {
-      "629eab5701072903fe4daa329c41cdc921bc7b26": "Publish Advisories\n\nGHSA-hhf6-3xpg-pggx\nGHSA-xfqm-j7pc-xrfc"
-    },
     "GHSA-625H-95R8-8XPM": {
       "43bebb034fa30aba23846058d36db54f3ffc34d4": "Publish Advisories\n\nGHSA-227x-7mh8-3cf6\nGHSA-625h-95r8-8xpm"
     },
@@ -258546,10 +258608,6 @@
     "GHSA-2J5W-CWC3-8HXW": {
       "fbbb8663d4fe38eff3b0204d9814ae535e9567d9": "Publish Advisories\n\nGHSA-2hhc-f86x-x74f\nGHSA-2j5w-cwc3-8hxw\nGHSA-4r39-f4rh-j6q8\nGHSA-4vf2-cm23-rf4c\nGHSA-543w-gq76-pw7g\nGHSA-7fjr-5hph-c2mh\nGHSA-9523-474x-5h36\nGHSA-f5ch-36rg-vfcc\nGHSA-qxh5-5r5p-5gvf\nGHSA-vmvp-2hhx-rgm8\nGHSA-wmq2-jc9m-xp4m\nGHSA-wrqc-q8p5-76m5\nGHSA-x9gc-p2qp-4p7v\nGHSA-7fjr-5hph-c2mh\nGHSA-qxh5-5r5p-5gvf"
     },
-    "GHSA-WMQ2-JC9M-XP4M": {
-      "fbbb8663d4fe38eff3b0204d9814ae535e9567d9": "Publish Advisories\n\nGHSA-2hhc-f86x-x74f\nGHSA-2j5w-cwc3-8hxw\nGHSA-4r39-f4rh-j6q8\nGHSA-4vf2-cm23-rf4c\nGHSA-543w-gq76-pw7g\nGHSA-7fjr-5hph-c2mh\nGHSA-9523-474x-5h36\nGHSA-f5ch-36rg-vfcc\nGHSA-qxh5-5r5p-5gvf\nGHSA-vmvp-2hhx-rgm8\nGHSA-wmq2-jc9m-xp4m\nGHSA-wrqc-q8p5-76m5\nGHSA-x9gc-p2qp-4p7v\nGHSA-7fjr-5hph-c2mh\nGHSA-qxh5-5r5p-5gvf",
-      "458fb882ccd033117475e4435eb8583fa39cff25": "Publish GHSA-wmq2-jc9m-xp4m"
-    },
     "GHSA-2C9Q-QWRC-F486": {
       "9c266c870c43a406d6e98dde9d315b46cdbe8303": "Publish Advisories\n\nGHSA-2c9q-qwrc-f486\nGHSA-2fx6-r6qx-3c7h\nGHSA-68qx-whxm-h4c4\nGHSA-95q3-pppp-r683\nGHSA-9cqh-5x6g-wgm9\nGHSA-hcwx-7q5v-vc67\nGHSA-hf7w-f4h4-9xp8\nGHSA-jrcc-7jf5-3pxg\nGHSA-jvx9-rj3w-jq99\nGHSA-m2fv-3rqm-g7p5\nGHSA-m5r7-w9v3-ghmx\nGHSA-p76j-5v6v-6c22\nGHSA-qj7f-j6h9-g5rq\nGHSA-v2fp-h4qx-x3r6\nGHSA-wxw2-2mx5-c5qf\nGHSA-m2fv-3rqm-g7p5"
     },

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,14 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-64193": {
+      "20c259d10d07268e1815231be36c4bd1e4e19788": "perlPackages.NetDNS: 1.48 -> 1.56\n\nhttps://metacpan.org/release/NLNETLABS/Net-DNS-1.56/changes\n\nAddresses CVE-2026-64193 and CVE-2026-64194.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit 9d44326e4e2b0ff267d6f052457956e455c95dea)",
+      "9d44326e4e2b0ff267d6f052457956e455c95dea": "perlPackages.NetDNS: 1.48 -> 1.56\n\nhttps://metacpan.org/release/NLNETLABS/Net-DNS-1.56/changes\n\nAddresses CVE-2026-64193 and CVE-2026-64194.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
+    },
+    "CVE-2026-64194": {
+      "20c259d10d07268e1815231be36c4bd1e4e19788": "perlPackages.NetDNS: 1.48 -> 1.56\n\nhttps://metacpan.org/release/NLNETLABS/Net-DNS-1.56/changes\n\nAddresses CVE-2026-64193 and CVE-2026-64194.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit 9d44326e4e2b0ff267d6f052457956e455c95dea)",
+      "9d44326e4e2b0ff267d6f052457956e455c95dea": "perlPackages.NetDNS: 1.48 -> 1.56\n\nhttps://metacpan.org/release/NLNETLABS/Net-DNS-1.56/changes\n\nAddresses CVE-2026-64193 and CVE-2026-64194.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
+    },
     "CVE-2026-5663": {
       "8db7e9c9922bed1cbb943065a327754374a603fd": "[26.05] dcmtk: patch CVE-2026-5663 (#544640)",
       "b427576fe206cf9116ccf8ac4a8e5f28e0df2afe": "dcmtk: patch CVE-2026-5663\n\nBackport upstream commit edbb085e using Debian's 3.6.9-compatible patch, which sanitizes values substituted into storescp execution hooks to prevent remote command injection.\n\n(cherry picked from commit a6e06b6c68476230c7ae99f8dc2b5106c55c26f6)\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)",