Skip to content

Commit a647155

Browse files
aboutcode-automationaboutcode-automation
committed
Sync Collecting Fix Commits: Fri May 22 15:58:55 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent 5ba0a0b commit a647155

4 files changed

Lines changed: 130 additions & 43 deletions

File tree

‎data/fix-commits/advisory-database-b78f1d41.json‎

Lines changed: 65 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,71 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-97JF-46M3-8953": {
5+
"9f007d9399e2189b0f7b7fff16918f9696f19f2b": "Improve GHSA-97jf-46m3-8953"
6+
},
7+
"GHSA-QQJ3-G7MX-5P4W": {
8+
"7b01dd95a1dd862c07b1f54540c856c998b073be": "Improve GHSA-qqj3-g7mx-5p4w",
9+
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
10+
"6a5497ae5b5140dd38d474b47d638fc023a5b54b": "Publish Advisories\n\nGHSA-29xp-372q-xqph\nGHSA-qqj3-g7mx-5p4w",
11+
"a07031e5660e1e8e95506f90b06a96d9b0e86095": "Publish Advisories\n\nGHSA-c8g6-qrwh-m3vp\nGHSA-qqj3-g7mx-5p4w",
12+
"4164cd32b70d532c0af2e9d0bf1bcdfa1643ee0c": "Publish Advisories\n\nGHSA-c8g6-qrwh-m3vp\nGHSA-h773-7gf7-9m2x\nGHSA-qqj3-g7mx-5p4w"
13+
},
14+
"GHSA-W54X-XFXG-4GXQ": {
15+
"a23c5881f4c88f0227844bbab987e35078713f9c": "Improve GHSA-w54x-xfxg-4gxq",
16+
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
17+
"a952b92c77d62b25936961ab9f2e67c8873b21b1": "Publish Advisories\n\nGHSA-vg3r-rm7w-2xgh\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-ccrc-5vp5-vp5j\nGHSA-ccrc-5vp5-vp5j",
18+
"1b16036d3e91178cf57511b4365572c034971d39": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq"
19+
},
20+
"GHSA-8PXW-9C75-6W56": {
21+
"548978e17a66719b2fc4a68347f59704cea87479": "Improve GHSA-8pxw-9c75-6w56",
22+
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
23+
"a952b92c77d62b25936961ab9f2e67c8873b21b1": "Publish Advisories\n\nGHSA-vg3r-rm7w-2xgh\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-ccrc-5vp5-vp5j\nGHSA-ccrc-5vp5-vp5j",
24+
"1b16036d3e91178cf57511b4365572c034971d39": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq"
25+
},
26+
"GHSA-8FF6-PC43-JWV3": {
27+
"d575449d12074bb972b48c316ea5dd6133a6c60c": "Improve GHSA-8ff6-pc43-jwv3",
28+
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
29+
"a952b92c77d62b25936961ab9f2e67c8873b21b1": "Publish Advisories\n\nGHSA-vg3r-rm7w-2xgh\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-ccrc-5vp5-vp5j\nGHSA-ccrc-5vp5-vp5j",
30+
"1b16036d3e91178cf57511b4365572c034971d39": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq"
31+
},
32+
"GHSA-2RGJ-GX5X-F62W": {
33+
"b0e6495fd055b0a41f1c1924a4199ffdbd32bf1b": "Publish Advisories\n\nGHSA-2rgj-gx5x-f62w\nGHSA-6gxq-f64p-5w6f"
34+
},
35+
"GHSA-6GXQ-F64P-5W6F": {
36+
"b0e6495fd055b0a41f1c1924a4199ffdbd32bf1b": "Publish Advisories\n\nGHSA-2rgj-gx5x-f62w\nGHSA-6gxq-f64p-5w6f"
37+
},
38+
"GHSA-4G75-9R48-JF92": {
39+
"f10e495297233ac9b28f60eff133933a5532da61": "Publish GHSA-4g75-9r48-jf92"
40+
},
41+
"GHSA-JG2M-9X48-3GVJ": {
42+
"35eb36aafaba2e94d4c102e18a521d121811b425": "Publish Advisories\n\nGHSA-jg2m-9x48-3gvj\nGHSA-6rcx-55r6-jx65\nGHSA-p93h-f2jc-477j\nGHSA-jg2m-9x48-3gvj"
43+
},
44+
"GHSA-6RCX-55R6-JX65": {
45+
"35eb36aafaba2e94d4c102e18a521d121811b425": "Publish Advisories\n\nGHSA-jg2m-9x48-3gvj\nGHSA-6rcx-55r6-jx65\nGHSA-p93h-f2jc-477j\nGHSA-jg2m-9x48-3gvj"
46+
},
47+
"GHSA-P93H-F2JC-477J": {
48+
"35eb36aafaba2e94d4c102e18a521d121811b425": "Publish Advisories\n\nGHSA-jg2m-9x48-3gvj\nGHSA-6rcx-55r6-jx65\nGHSA-p93h-f2jc-477j\nGHSA-jg2m-9x48-3gvj"
49+
},
50+
"GHSA-HVPH-5985-R63V": {
51+
"498733c883471b95a13dd8755d1d141de25a76a2": "Publish Advisories\n\nGHSA-hvph-5985-r63v\nGHSA-p3pq-hxmr-vqqr"
52+
},
53+
"GHSA-P3PQ-HXMR-VQQR": {
54+
"498733c883471b95a13dd8755d1d141de25a76a2": "Publish Advisories\n\nGHSA-hvph-5985-r63v\nGHSA-p3pq-hxmr-vqqr"
55+
},
56+
"GHSA-X8MH-94WC-33GV": {
57+
"9118b553717c3126d633400f8755b56f2e6cb26d": "Publish Advisories\n\nGHSA-x8mh-94wc-33gv\nGHSA-6rr6-v7cj-mxpg"
58+
},
59+
"GHSA-6RR6-V7CJ-MXPG": {
60+
"9118b553717c3126d633400f8755b56f2e6cb26d": "Publish Advisories\n\nGHSA-x8mh-94wc-33gv\nGHSA-6rr6-v7cj-mxpg"
61+
},
62+
"GHSA-M5GW-83W2-7749": {
63+
"b60ef27f81e880996b0d2f37cfcbc8da2bf48c3c": "Improve GHSA-m5gw-83w2-7749"
64+
},
65+
"GHSA-3X3V-W654-M28M": {
66+
"42e2eea752e551852fac77073220579c03cffa78": "Improve GHSA-3x3v-w654-m28m",
67+
"a866a54ea42494e6e5f4269100e5f5b04693e991": "Publish Advisories\n\nGHSA-36h3-7c54-j27r\nGHSA-3x3v-w654-m28m"
68+
},
469
"GHSA-6Q68-2QQ3-8C3H": {
570
"4cf49cffc73ee8b644bca42531d9587f39e41ce7": "Publish Advisories\n\nGHSA-6q68-2qq3-8c3h\nGHSA-273r-585g-q7wv\nGHSA-92j9-vfpr-4xhf\nGHSA-hg7j-7v3f-fjq2\nGHSA-hvqp-vjwf-27jg\nGHSA-jrc7-p252-6hpq\nGHSA-pq4x-338r-cq3h\nGHSA-x4qq-w73c-72mv\nGHSA-x7jf-v64x-878j",
671
"8df36c2838bbecd50eeba3d7ab04d966cc1a1634": "Publish Advisories\n\nGHSA-2rpx-x37c-9w5p\nGHSA-66f8-vggg-rhqg\nGHSA-6jxx-38j8-r7jg\nGHSA-6q68-2qq3-8c3h\nGHSA-6vvc-45wx-gh3g\nGHSA-79pm-5425-72gv\nGHSA-7p8p-2925-f52x\nGHSA-7v7w-c97g-6mp4\nGHSA-86p5-h8pq-p6hx\nGHSA-cw7f-mrgf-5rg9\nGHSA-fr4x-v988-5548\nGHSA-g8rr-g77c-8v8c\nGHSA-hjrw-wq7f-29c8\nGHSA-j9rr-jp6j-3p55\nGHSA-jq9h-5qpv-244x\nGHSA-mf3x-75hv-79w6\nGHSA-mgj3-4cvf-j637\nGHSA-q93h-2387-4rjw\nGHSA-vjhp-527w-c5vj\nGHSA-vrv2-gjv8-mw36\nGHSA-wxp6-wm3h-86w8",
@@ -4293,10 +4358,6 @@
42934358
"GHSA-WMM3-H9QJ-P5V6": {
42944359
"61f8bf06073d22ad9c7f61cadc1c2352aa073576": "Publish Advisories\n\nGHSA-3636-h3vx-6465\nGHSA-8f47-4rh3-x44m\nGHSA-gxx6-h3g6-vwjh\nGHSA-rg65-45m7-hq57\nGHSA-wmm3-h9qj-p5v6"
42954360
},
4296-
"GHSA-6RR6-V7CJ-MXPG": {
4297-
"9912e4e25c6f71192aa28d9ff85cdaddd0f5f559": "Improve GHSA-6rr6-v7cj-mxpg",
4298-
"e7afb516dc7a31bbc662214297bf3981450beca3": "Improve GHSA-6rr6-v7cj-mxpg"
4299-
},
43004361
"GHSA-H9RH-5FFH-H669": {
43014362
"c6ff5018787e2fb775dc81fdf1ecd8642c4c84ac": "Publish Advisories\n\nGHSA-h9rh-5ffh-h669\nGHSA-j3f5-rw74-g4rv"
43024363
},
@@ -7620,27 +7681,6 @@
76207681
"589adabfa401a8f141c60bd2a896a08df818d2a1": "Publish GHSA-33r3-4whc-44c2",
76217682
"cad7642af0c1ccbf147151d440b2d22fbc998c1b": "Publish Advisories\n\nGHSA-33r3-4whc-44c2\nGHSA-458j-xx4x-4375\nGHSA-gwhp-pf74-vj37\nGHSA-hrwm-hgmj-7p9c\nGHSA-w59f-67xm-rxx7"
76227683
},
7623-
"GHSA-8FF6-PC43-JWV3": {
7624-
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
7625-
"a952b92c77d62b25936961ab9f2e67c8873b21b1": "Publish Advisories\n\nGHSA-vg3r-rm7w-2xgh\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-ccrc-5vp5-vp5j\nGHSA-ccrc-5vp5-vp5j",
7626-
"1b16036d3e91178cf57511b4365572c034971d39": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq"
7627-
},
7628-
"GHSA-8PXW-9C75-6W56": {
7629-
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
7630-
"a952b92c77d62b25936961ab9f2e67c8873b21b1": "Publish Advisories\n\nGHSA-vg3r-rm7w-2xgh\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-ccrc-5vp5-vp5j\nGHSA-ccrc-5vp5-vp5j",
7631-
"1b16036d3e91178cf57511b4365572c034971d39": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq"
7632-
},
7633-
"GHSA-W54X-XFXG-4GXQ": {
7634-
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
7635-
"a952b92c77d62b25936961ab9f2e67c8873b21b1": "Publish Advisories\n\nGHSA-vg3r-rm7w-2xgh\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-ccrc-5vp5-vp5j\nGHSA-ccrc-5vp5-vp5j",
7636-
"1b16036d3e91178cf57511b4365572c034971d39": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq"
7637-
},
7638-
"GHSA-QQJ3-G7MX-5P4W": {
7639-
"c08c48d131429afc0ebf5cd1274e0694ff802344": "Publish Advisories\n\nGHSA-8ff6-pc43-jwv3\nGHSA-8pxw-9c75-6w56\nGHSA-w54x-xfxg-4gxq\nGHSA-qqj3-g7mx-5p4w",
7640-
"6a5497ae5b5140dd38d474b47d638fc023a5b54b": "Publish Advisories\n\nGHSA-29xp-372q-xqph\nGHSA-qqj3-g7mx-5p4w",
7641-
"a07031e5660e1e8e95506f90b06a96d9b0e86095": "Publish Advisories\n\nGHSA-c8g6-qrwh-m3vp\nGHSA-qqj3-g7mx-5p4w",
7642-
"4164cd32b70d532c0af2e9d0bf1bcdfa1643ee0c": "Publish Advisories\n\nGHSA-c8g6-qrwh-m3vp\nGHSA-h773-7gf7-9m2x\nGHSA-qqj3-g7mx-5p4w"
7643-
},
76447684
"GHSA-2H5W-9G5W-VWPH": {
76457685
"5c51eb6e4f4be7239b2529e78964b1bf4f7e40a0": "Publish Advisories\n\nGHSA-2274-3hgr-wxv6\nGHSA-2h5w-9g5w-vwph\nGHSA-54w4-233h-x86g\nGHSA-74hf-jfjp-cf88\nGHSA-94pq-gp68-xccr\nGHSA-97wr-3wr5-r6wx\nGHSA-c4v2-4wg6-3r8x\nGHSA-j8g2-w9r2-vfj2\nGHSA-mj2w-r8cc-jq9c\nGHSA-qjqp-r6hf-xpqh\nGHSA-r8x9-p5v6-vx46\nGHSA-v7c2-5wfc-rfff\nGHSA-vxvf-xvm3-p8j5\nGHSA-x8v7-mg93-8rrg"
76467686
},
@@ -7671,9 +7711,6 @@
76717711
"GHSA-X8V7-MG93-8RRG": {
76727712
"5c51eb6e4f4be7239b2529e78964b1bf4f7e40a0": "Publish Advisories\n\nGHSA-2274-3hgr-wxv6\nGHSA-2h5w-9g5w-vwph\nGHSA-54w4-233h-x86g\nGHSA-74hf-jfjp-cf88\nGHSA-94pq-gp68-xccr\nGHSA-97wr-3wr5-r6wx\nGHSA-c4v2-4wg6-3r8x\nGHSA-j8g2-w9r2-vfj2\nGHSA-mj2w-r8cc-jq9c\nGHSA-qjqp-r6hf-xpqh\nGHSA-r8x9-p5v6-vx46\nGHSA-v7c2-5wfc-rfff\nGHSA-vxvf-xvm3-p8j5\nGHSA-x8v7-mg93-8rrg"
76737713
},
7674-
"GHSA-JG2M-9X48-3GVJ": {
7675-
"61a9b99d9e9fbe4e34ddd52aa32db728ff1ad469": "Improve GHSA-jg2m-9x48-3gvj"
7676-
},
76777714
"GHSA-3QCG-H4XG-5JRG": {
76787715
"77b144c67cf5a22a7e2471b065eb800628480ccf": "Publish Advisories\n\nGHSA-3qcg-h4xg-5jrg\nGHSA-c34c-82p7-x3p9\nGHSA-cfhj-895c-686j"
76797716
},
@@ -8116,18 +8153,6 @@
81168153
"62043fc9751648ef3387a025601cfaadf410dd9a": "Improve GHSA-qmq6-f8pr-cx5x",
81178154
"baafd1ff293a61cc6c1d76a660d720d20c914100": "Publish Advisories\n\nGHSA-78pv-qq8x-94px\nGHSA-g347-f6xx-g55w\nGHSA-p6p5-j5xg-r643\nGHSA-p88x-88cf-mv94\nGHSA-qmq6-f8pr-cx5x\nGHSA-wrv8-79m2-qg24"
81188155
},
8119-
"GHSA-6RCX-55R6-JX65": {
8120-
"3f941ce8e1cd525b954478994612243266b0da12": "Improve GHSA-6rcx-55r6-jx65"
8121-
},
8122-
"GHSA-P3PQ-HXMR-VQQR": {
8123-
"ab2aae537244a28e7804f9fced98fcd5ada1478e": "Improve GHSA-p3pq-hxmr-vqqr"
8124-
},
8125-
"GHSA-HVPH-5985-R63V": {
8126-
"8b25806fc2679576917c9e1db12119ce10341335": "Improve GHSA-hvph-5985-r63v"
8127-
},
8128-
"GHSA-X8MH-94WC-33GV": {
8129-
"334763ef43a1185d8f1cc56d85598904cde5d495": "Improve GHSA-x8mh-94wc-33gv"
8130-
},
81318156
"GHSA-GQRQ-J6PM-98C2": {
81328157
"189c2cd4b5fbebfc67fe17fc42882bed189e996e": "Publish GHSA-gqrq-j6pm-98c2",
81338158
"176bd4deaa37a598ad12be2813a4713fd3c585b3": "Publish GHSA-gqrq-j6pm-98c2",
@@ -17934,9 +17959,6 @@
1793417959
"GHSA-36H3-7C54-J27R": {
1793517960
"a866a54ea42494e6e5f4269100e5f5b04693e991": "Publish Advisories\n\nGHSA-36h3-7c54-j27r\nGHSA-3x3v-w654-m28m"
1793617961
},
17937-
"GHSA-3X3V-W654-M28M": {
17938-
"a866a54ea42494e6e5f4269100e5f5b04693e991": "Publish Advisories\n\nGHSA-36h3-7c54-j27r\nGHSA-3x3v-w654-m28m"
17939-
},
1794017962
"GHSA-443W-3RQ3-5M5H": {
1794117963
"4bbe1ac707ddd9da0c80ef4892111ca710aa3c74": "Publish Advisories\n\nGHSA-443w-3rq3-5m5h\nGHSA-h8r8-wccr-v5f2"
1794217964
},

‎data/fix-commits/jq-38094310.json‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
{
22
"vcs_url": "https://github.com/stedolan/jq",
33
"vulnerabilities": {
4+
"CVE-2026-47770": {
5+
"7122866869960b55cea3646bc91334ef55787831": "Guard deep structural equality and comparison recursion (#3539)\n\njv_equal and jv_cmp overflows the C stack on deeply nested\ninput. Cap recursion at 10000 with -1 / INT_MIN sentinels;\noperators that compose user expressions surface this as\n\"Equality check too deep\" / \"Comparison too deep\".\n\nFixes CVE-2026-47770."
6+
},
47
"CVE-2026-44777": {
58
"f58787c41835d9b17795730cb04925fdba25c71c": "Detect circular module imports to prevent stack overflow\n\njq used to recurse without bound on mutual or self-referential\n`import` declarations, exhausting the stack. Track each library's\nload state with a `loading` flag set before its dependencies are\nprocessed; a recursive reference to an in-progress library now\nreports \"circular import of X\".\n\nFixes CVE-2026-44777."
69
},

0 commit comments

Comments
 (0)