Sync Collecting Fix Commits: Sat May 16 19:15:12 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,34 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-C4J6-FC7J-M34R": {
+      "fa3080a4417eb75a4c0a27a4caa836c041af2717": "Improve GHSA-c4j6-fc7j-m34r",
+      "c1805113226af425b109c5b0b88aeebe9aeda294": "Publish Advisories\n\nGHSA-267c-6grr-h53f\nGHSA-36qx-fr4f-26g5\nGHSA-492v-c6pp-mqqv\nGHSA-c4j6-fc7j-m34r\nGHSA-wfc6-r584-vfw7"
+    },
+    "GHSA-J8PF-3VJV-773Q": {
+      "50ff5083f0c498d958f88ba2d3f069c68e28ebfb": "Publish Advisories\n\nGHSA-j8pf-3vjv-773q\nGHSA-2x39-j499-jv87\nGHSA-f4x8-m8jx-pfpg\nGHSA-pm8f-4p6p-6x53"
+    },
+    "GHSA-2X39-J499-JV87": {
+      "50ff5083f0c498d958f88ba2d3f069c68e28ebfb": "Publish Advisories\n\nGHSA-j8pf-3vjv-773q\nGHSA-2x39-j499-jv87\nGHSA-f4x8-m8jx-pfpg\nGHSA-pm8f-4p6p-6x53"
+    },
+    "GHSA-F4X8-M8JX-PFPG": {
+      "50ff5083f0c498d958f88ba2d3f069c68e28ebfb": "Publish Advisories\n\nGHSA-j8pf-3vjv-773q\nGHSA-2x39-j499-jv87\nGHSA-f4x8-m8jx-pfpg\nGHSA-pm8f-4p6p-6x53"
+    },
+    "GHSA-PM8F-4P6P-6X53": {
+      "50ff5083f0c498d958f88ba2d3f069c68e28ebfb": "Publish Advisories\n\nGHSA-j8pf-3vjv-773q\nGHSA-2x39-j499-jv87\nGHSA-f4x8-m8jx-pfpg\nGHSA-pm8f-4p6p-6x53"
+    },
+    "GHSA-9V3M-8FP8-MJ99": {
+      "b43be109438bb4454f79407eb3bc3a044fada88f": "Improve GHSA-9v3m-8fp8-mj99",
+      "b19410b243ce68f9dbf24309a5a67c198245baa0": "Improve GHSA-9v3m-8fp8-mj99",
+      "2394cf418a9397dd31c52ddc93fa97f4490a9e0f": "Publish Advisories\n\nGHSA-7mvr-5x2g-wfc8\nGHSA-pj7m-g53m-7638\nGHSA-3mgp-fx93-9xv5\nGHSA-4p24-vmcr-4gqj\nGHSA-ph58-4vrj-w6hr\nGHSA-9v3m-8fp8-mj99",
+      "8534528ab17601710bdf125f5e05d06852f993a2": "Publish Advisories\n\nGHSA-9v3m-8fp8-mj99\nGHSA-gwp4-hfv6-p7hw\nGHSA-r6j9-8759-g62w\nGHSA-p66x-2cv9-qq3v\nGHSA-g3wg-6mcf-8jj6",
+      "efe09229e6a84acd2891f972c89c8f46870d38f8": "Publish GHSA-9v3m-8fp8-mj99",
+      "4e7e5ae194ea0cfe03f6eb752d7ef0a83c2145d1": "Publish GHSA-9v3m-8fp8-mj99",
+      "c319b38090e3a34dcb3d5394d02bc4012b102b6d": "Publish GHSA-9v3m-8fp8-mj99",
+      "4156e0760ca68b7959d1d921e5e67f9d554f7345": "Publish GHSA-9v3m-8fp8-mj99",
+      "ee2d4ebc7668768e67debc60d08aa02409ff8ce7": "Publish Advisories\n\nGHSA-c43v-hrmg-56r4\nGHSA-9v3m-8fp8-mj99",
+      "76695663b425dc26900a7af471e057a86b15674b": "Publish GHSA-9v3m-8fp8-mj99"
+    },
     "GHSA-5CQ6-9F97-WJWX": {
       "97b118988aa2a4264c51d2bcffcb6cf39076abe5": "Improve GHSA-5cq6-9f97-wjwx",
       "54a9b5fd7fcc42ced3758a340ff34669f5ebb0b2": "Publish Advisories\n\nGHSA-j4vj-fpx3-v8rx\nGHSA-4fcc-vrwx-v754\nGHSA-5cq6-9f97-wjwx\nGHSA-r2q3-hjc8-7x6q\nGHSA-wxv8-w48j-r2f4",
@@ -1038,17 +1066,6 @@
     "GHSA-WRWR-H859-XH2R": {
       "0b6b65dff840a5fdb1fedd5db7d70ba891892130": "Publish Advisories\n\nGHSA-57g9-58c2-xjg3\nGHSA-9qpr-vc49-hqg2\nGHSA-c8xv-5998-g76h\nGHSA-cj9g-27ph-4cgv\nGHSA-crqm-m339-7m2p\nGHSA-hcwq-x9fw-8cfq\nGHSA-wrwr-h859-xh2r"
     },
-    "GHSA-9V3M-8FP8-MJ99": {
-      "b19410b243ce68f9dbf24309a5a67c198245baa0": "Improve GHSA-9v3m-8fp8-mj99",
-      "2394cf418a9397dd31c52ddc93fa97f4490a9e0f": "Publish Advisories\n\nGHSA-7mvr-5x2g-wfc8\nGHSA-pj7m-g53m-7638\nGHSA-3mgp-fx93-9xv5\nGHSA-4p24-vmcr-4gqj\nGHSA-ph58-4vrj-w6hr\nGHSA-9v3m-8fp8-mj99",
-      "8534528ab17601710bdf125f5e05d06852f993a2": "Publish Advisories\n\nGHSA-9v3m-8fp8-mj99\nGHSA-gwp4-hfv6-p7hw\nGHSA-r6j9-8759-g62w\nGHSA-p66x-2cv9-qq3v\nGHSA-g3wg-6mcf-8jj6",
-      "efe09229e6a84acd2891f972c89c8f46870d38f8": "Publish GHSA-9v3m-8fp8-mj99",
-      "4e7e5ae194ea0cfe03f6eb752d7ef0a83c2145d1": "Publish GHSA-9v3m-8fp8-mj99",
-      "c319b38090e3a34dcb3d5394d02bc4012b102b6d": "Publish GHSA-9v3m-8fp8-mj99",
-      "4156e0760ca68b7959d1d921e5e67f9d554f7345": "Publish GHSA-9v3m-8fp8-mj99",
-      "ee2d4ebc7668768e67debc60d08aa02409ff8ce7": "Publish Advisories\n\nGHSA-c43v-hrmg-56r4\nGHSA-9v3m-8fp8-mj99",
-      "76695663b425dc26900a7af471e057a86b15674b": "Publish GHSA-9v3m-8fp8-mj99"
-    },
     "GHSA-7G73-99R4-M4MJ": {
       "286bdc6c15ab085d115f014f62229171e91fcb31": "Publish Advisories\n\nGHSA-7g73-99r4-m4mj\nGHSA-9rvc-vf7m-pgm2\nGHSA-hp26-q66v-q2w7\nGHSA-m99r-2hxc-cp3q"
     },
@@ -2945,9 +2962,6 @@
     "GHSA-492V-C6PP-MQQV": {
       "c1805113226af425b109c5b0b88aeebe9aeda294": "Publish Advisories\n\nGHSA-267c-6grr-h53f\nGHSA-36qx-fr4f-26g5\nGHSA-492v-c6pp-mqqv\nGHSA-c4j6-fc7j-m34r\nGHSA-wfc6-r584-vfw7"
     },
-    "GHSA-C4J6-FC7J-M34R": {
-      "c1805113226af425b109c5b0b88aeebe9aeda294": "Publish Advisories\n\nGHSA-267c-6grr-h53f\nGHSA-36qx-fr4f-26g5\nGHSA-492v-c6pp-mqqv\nGHSA-c4j6-fc7j-m34r\nGHSA-wfc6-r584-vfw7"
-    },
     "GHSA-WFC6-R584-VFW7": {
       "c1805113226af425b109c5b0b88aeebe9aeda294": "Publish Advisories\n\nGHSA-267c-6grr-h53f\nGHSA-36qx-fr4f-26g5\nGHSA-492v-c6pp-mqqv\nGHSA-c4j6-fc7j-m34r\nGHSA-wfc6-r584-vfw7"
     },

data/fix-commits/imagemagick-b15feb65.json

@@ -2,6 +2,7 @@
   "vcs_url": "https://github.com/imagemagick/imagemagick",
   "vulnerabilities": {
     "GHSA-6GXQ-F64P-5W6F": {
+      "d3b02f25be7d2e097c4e0af90fe2535954381063": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6gxq-f64p-5w6f",
       "ac461f3f72bfd4482e4611f1a1eccdaa608b10c7": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6gxq-f64p-5w6f"
     },
     "GHSA-RCR6-G7JC-F57G": {

data/fix-commits/imagemagick6-19533b67.json

@@ -2,6 +2,7 @@
   "vcs_url": "https://github.com/imagemagick/imagemagick6",
   "vulnerabilities": {
     "GHSA-6GXQ-F64P-5W6F": {
+      "81589e7209b72bb84442380ff53109f61d41902d": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6gxq-f64p-5w6f",
       "53d44cdc62772f00e2a0676e8468b555f1aae6be": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6gxq-f64p-5w6f"
     },
     "GHSA-4G75-9R48-JF92": {

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,10 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-44348": {
+      "e8484ef637a4d3b50bcf4798a89947397fc3c99b": "[Backport release-25.11] podofo_1_0: 1.0.3 -> 1.0.4, fix CVE-2026-44348 (#520646)",
+      "851f500f163044651b89c11f0e548e320ece1fb1": "podofo_1_0: 1.0.3 -> 1.0.4, fix CVE-2026-44348"
+    },
     "CVE-2026-46433": {
       "9783061bf1276da0d42c1deab03ef0154f8bb4ae": "lldpd: fix oob heap read\n\nFixes: CVE-2026-46433"
     },