Sync Collecting Fix Commits: Mon Aug 31 20:02:25 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,62 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-G8RV-GP9F-Q875": {
+      "467ce7f4598750246191f7bb46881368b25e1d03": "Improve GHSA-g8rv-gp9f-q875"
+    },
+    "GHSA-2R2C-CX56-8933": {
+      "badee1979a835ab9ba7854fdb285e179d7a2a07b": "Improve GHSA-2r2c-cx56-8933",
+      "073e611e4ca245277243eb6d55dfd7e60af18fab": "Improve GHSA-2r2c-cx56-8933",
+      "ffcf09d2985f26ec684f757049278a4b9426a47f": "Improve GHSA-2r2c-cx56-8933",
+      "a98ecc0a2017806af2e68e480b70154156d9c756": "Publish Advisories\n\nGHSA-7pr5-w74r-jjj7\nGHSA-2r2c-cx56-8933\nGHSA-3h6h-67x3-cv5x\nGHSA-3wrr-7qpf-2prh\nGHSA-47qp-hqvx-6r3f\nGHSA-4w6r-5c2j-qf5f\nGHSA-52fw-7fw2-fmv5\nGHSA-5hh8-q8hv-fr38\nGHSA-6mhr-74x2-98v9\nGHSA-9fxm-vc8v-hj55\nGHSA-g72g-r7m4-9x4g\nGHSA-gprh-27j3-g5h4\nGHSA-h6vv-pcq8-7xm4\nGHSA-hgj6-7826-r7m5\nGHSA-hmcr-rmjq-47qr\nGHSA-j3rv-43j4-c7qm\nGHSA-r989-7g3j-wjhw\nGHSA-rcqc-6cw3-h962\nGHSA-rmj7-2vxq-3g9f\nGHSA-g796-fgmg-93mv",
+      "3fdade359a569c7904e212331250ace917aff918": "Publish Advisories\n\nGHSA-2c85-rfcc-g74j\nGHSA-2r2c-cx56-8933\nGHSA-2vcc-5v34-9jc8\nGHSA-47qp-hqvx-6r3f\nGHSA-64mm-vxmg-q3vj\nGHSA-6x8v-2fq5-2229\nGHSA-94jp-7776-qj6q\nGHSA-gcq2-9pq2-cxqm"
+    },
+    "GHSA-47QP-HQVX-6R3F": {
+      "f43171b653f223e7760098406913cb838c79b2da": "Improve GHSA-47qp-hqvx-6r3f",
+      "d20c5e8f1c60d98992daac422eafe5384b5c1978": "Improve GHSA-47qp-hqvx-6r3f",
+      "8e006d478bda57c4db78c71461a9fa0bba93e500": "Improve GHSA-47qp-hqvx-6r3f",
+      "a98ecc0a2017806af2e68e480b70154156d9c756": "Publish Advisories\n\nGHSA-7pr5-w74r-jjj7\nGHSA-2r2c-cx56-8933\nGHSA-3h6h-67x3-cv5x\nGHSA-3wrr-7qpf-2prh\nGHSA-47qp-hqvx-6r3f\nGHSA-4w6r-5c2j-qf5f\nGHSA-52fw-7fw2-fmv5\nGHSA-5hh8-q8hv-fr38\nGHSA-6mhr-74x2-98v9\nGHSA-9fxm-vc8v-hj55\nGHSA-g72g-r7m4-9x4g\nGHSA-gprh-27j3-g5h4\nGHSA-h6vv-pcq8-7xm4\nGHSA-hgj6-7826-r7m5\nGHSA-hmcr-rmjq-47qr\nGHSA-j3rv-43j4-c7qm\nGHSA-r989-7g3j-wjhw\nGHSA-rcqc-6cw3-h962\nGHSA-rmj7-2vxq-3g9f\nGHSA-g796-fgmg-93mv",
+      "3fdade359a569c7904e212331250ace917aff918": "Publish Advisories\n\nGHSA-2c85-rfcc-g74j\nGHSA-2r2c-cx56-8933\nGHSA-2vcc-5v34-9jc8\nGHSA-47qp-hqvx-6r3f\nGHSA-64mm-vxmg-q3vj\nGHSA-6x8v-2fq5-2229\nGHSA-94jp-7776-qj6q\nGHSA-gcq2-9pq2-cxqm"
+    },
+    "GHSA-M5R8-W65Q-8WJF": {
+      "fcbbe34f3c1165105382c096024cf78ba3b18c5e": "Improve GHSA-m5r8-w65q-8wjf",
+      "4a85682ca54fb4f2802215873538b67321113fac": "Publish Advisories\n\nGHSA-m5r8-w65q-8wjf\nGHSA-v7h8-xhh6-gfj4\nGHSA-m5r8-w65q-8wjf\nGHSA-v7h8-xhh6-gfj4",
+      "97dee68fc0c64eb533a4a82a37057645a17bbcb9": "Merge pull request #9223 from oscerd/oscerd-GHSA-m5r8-w65q-8wjf",
+      "ac83e3c3f0224660248657362b6edaf331741bc2": "[GHSA-m5r8-w65q-8wjf] Improper input validation vulnerability in Apache Camel A...\n\nSigned-off-by: Andrea Cosentino <ancosen@gmail.com>"
+    },
+    "GHSA-5739-39V2-5754": {
+      "acaf20a0b243746a78f6a3dc1a2cba1a0beef856": "Publish Advisories\n\nGHSA-5739-39v2-5754\nGHSA-xhf4-832v-7xcr",
+      "e0cb3a9e7d2a8d9053092f81e39865c420add841": "Merge pull request #8630 from github/magnogaspar-GHSA-5739-39v2-5754",
+      "da50dc4d263c11b6fa600d4948b972a481cd518e": "Improve GHSA-5739-39v2-5754",
+      "64283be75bd0da05060e4b79e269d888932dcbab": "Publish GHSA-5739-39v2-5754"
+    },
+    "GHSA-XHF4-832V-7XCR": {
+      "acaf20a0b243746a78f6a3dc1a2cba1a0beef856": "Publish Advisories\n\nGHSA-5739-39v2-5754\nGHSA-xhf4-832v-7xcr",
+      "9ce964809ea7901a15e5c987082cf17e23fa2a95": "Publish GHSA-xhf4-832v-7xcr"
+    },
+    "GHSA-9XQ9-36W5-Q796": {
+      "c6c4b355ca13a700e024099ddb42d251864db291": "Publish GHSA-9xq9-36w5-q796",
+      "526fbb0d5437acfd7cc11a195d230424bc845b75": "Merge pull request #9200 from github/antonisloukis-GHSA-9xq9-36w5-q796",
+      "3d5d7d441fb990d9ff6ec98c1ba5c6d25dd5271f": "Improve GHSA-9xq9-36w5-q796",
+      "e02f0b1d19fd76b41d6baee13da9c2d2094bba76": "Publish Advisories\n\nGHSA-4hm9-844j-jmxp\nGHSA-wgjv-9j3q-jhg8\nGHSA-g857-hhfv-j68w\nGHSA-3363-2ph6-35wh\nGHSA-73jc-5mrq-prw7\nGHSA-799f-29jm-gr6c\nGHSA-9xq9-36w5-q796\nGHSA-h9cc-w26m-j342\nGHSA-jrrg-99xh-5j2q\nGHSA-m549-qq94-fvhg\nGHSA-mw3q-r9wh-h2ff\nGHSA-vghx-352f-93jm\nGHSA-wmhf-fqc8-vxhh\nGHSA-5g86-85rp-f9hx\nGHSA-8qhj-4f8c-j8qg\nGHSA-cj8g-prcm-mfg5\nGHSA-mqq6-462x-jxmm\nGHSA-vrmh-5mmx-hjwx",
+      "e4d0ff855ce7ff5837da1c14ad4b547784f09c1c": "Publish GHSA-9xq9-36w5-q796",
+      "7d8049e51ad706d7016304e96169eb910460918a": "Publish GHSA-9xq9-36w5-q796"
+    },
+    "GHSA-7GCF-G7XR-8HXJ": {
+      "99cef9bc7add8a47d597ca73ff603859cd49dd5b": "Publish GHSA-7gcf-g7xr-8hxj",
+      "e3f2b37ce381c44bf66f0a0233a21e45c9772034": "Merge pull request #8976 from github/iliana-GHSA-7gcf-g7xr-8hxj",
+      "8ea647c02f421cae49f95930f1b7b7335877cc68": "Improve GHSA-7gcf-g7xr-8hxj",
+      "16ffcce02a17e462fdd9ad2ed1b36d4531f90c0e": "Publish Advisories\n\nGHSA-qmc5-gv6v-8p22\nGHSA-7gcf-g7xr-8hxj"
+    },
+    "GHSA-M2H6-J472-RP4C": {
+      "f278f57d346427bc36f383c6ab427c34af07e203": "Improve GHSA-m2h6-j472-rp4c",
+      "814efda19d2741583137fa806c4409873d3099f4": "Improve GHSA-m2h6-j472-rp4c",
+      "40c4c7502491a71ba09c6debc6178fc052e1863a": "Publish Advisories\n\nGHSA-jwv3-5hgf-82ww\nGHSA-m2h6-j472-rp4c"
+    },
+    "GHSA-6X9P-4R67-5GJX": {
+      "7a0c20e4e43246e0d0c1ab2239bf8490ec0f08aa": "Improve GHSA-6x9p-4r67-5gjx",
+      "a5406a1b47fd2f3ddf7b7a6c059df41ed49a2416": "Publish GHSA-6x9p-4r67-5gjx"
+    },
     "GHSA-MQ36-523M-X7VV": {
       "765c6983989525cf66c80a176ef194ef3d9cfea1": "Improve GHSA-mq36-523m-x7vv",
       "d0f0467d4afab07aec82a755fcdde993c7f43335": "Publish Advisories\n\nGHSA-33j8-j763-4fv5\nGHSA-3vx2-vqx8-jxfg\nGHSA-83r6-96m8-r52p\nGHSA-93g8-qqv3-mrx8\nGHSA-qp3f-rvj8-46c8\nGHSA-xf62-wr5p-5p95\nGHSA-2p39-2jf3-fv2q\nGHSA-6wvw-vrw4-363w\nGHSA-8fxq-53rx-ph5f\nGHSA-h58c-xccx-75m3\nGHSA-jgvr-6x5w-hx5w\nGHSA-mc9m-6fm9-pghc\nGHSA-mq36-523m-x7vv"
@@ -416,11 +472,6 @@
     "GHSA-42R5-VHPQ-M858": {
       "ffe81c9169e4198264066e658a7fd66efbd9e410": "Publish GHSA-42r5-vhpq-m858"
     },
-    "GHSA-M5R8-W65Q-8WJF": {
-      "4a85682ca54fb4f2802215873538b67321113fac": "Publish Advisories\n\nGHSA-m5r8-w65q-8wjf\nGHSA-v7h8-xhh6-gfj4\nGHSA-m5r8-w65q-8wjf\nGHSA-v7h8-xhh6-gfj4",
-      "97dee68fc0c64eb533a4a82a37057645a17bbcb9": "Merge pull request #9223 from oscerd/oscerd-GHSA-m5r8-w65q-8wjf",
-      "ac83e3c3f0224660248657362b6edaf331741bc2": "[GHSA-m5r8-w65q-8wjf] Improper input validation vulnerability in Apache Camel A...\n\nSigned-off-by: Andrea Cosentino <ancosen@gmail.com>"
-    },
     "GHSA-V7H8-XHH6-GFJ4": {
       "4a85682ca54fb4f2802215873538b67321113fac": "Publish Advisories\n\nGHSA-m5r8-w65q-8wjf\nGHSA-v7h8-xhh6-gfj4\nGHSA-m5r8-w65q-8wjf\nGHSA-v7h8-xhh6-gfj4",
       "4c759bc6dd50fb840e772537a3d074380984ff10": "Merge pull request #9224 from oscerd/oscerd-GHSA-v7h8-xhh6-gfj4",
@@ -1203,9 +1254,6 @@
     "GHSA-VMM3-XGCX-67HM": {
       "cb903af0cbf5f801e45e51732c45faea75d2ad78": "Publish GHSA-vmm3-xgcx-67hm"
     },
-    "GHSA-6X9P-4R67-5GJX": {
-      "a5406a1b47fd2f3ddf7b7a6c059df41ed49a2416": "Publish GHSA-6x9p-4r67-5gjx"
-    },
     "GHSA-GJRP-XGMH-X9QQ": {
       "fc6f8c124e81ec21078c55bad50c43a255f28d18": "Improve GHSA-gjrp-xgmh-x9qq",
       "333742e9cacaa43f365b92429bc394e4078ab864": "Publish Advisories\n\nGHSA-2w69-qvjg-hvjx\nGHSA-3cgp-3xvw-98x8\nGHSA-4f6g-68pf-7vhv\nGHSA-4xc4-762w-m6cg\nGHSA-5fp7-g646-ccf4\nGHSA-78h3-63c4-5fqc\nGHSA-8v8x-cx79-35w7\nGHSA-9583-h5hc-x8cw\nGHSA-9jcx-v3wj-wh4m\nGHSA-9xg7-mwmp-xmjx\nGHSA-gjrp-xgmh-x9qq\nGHSA-h5cw-625j-3rxh\nGHSA-pcwc-3fw3-8cqv\nGHSA-wfq2-52f7-7qvj",
@@ -1228,14 +1276,6 @@
       "9b115bcb42961239b1e131d63808b1230a4b4885": "Publish Advisories\n\nGHSA-xxjr-mmjv-4gpg\nGHSA-5hr4-253g-cpx2\nGHSA-qpc3-8vqg-8g6w\nGHSA-43g7-cwr8-q3jh\nGHSA-89c6-vpcj-7vj4\nGHSA-8rrq-wcg8-cv5q\nGHSA-962q-hwm5-52x5\nGHSA-9ccr-r5hg-74gf\nGHSA-c73c-x77g-854r\nGHSA-fjq3-ffvr-vm46\nGHSA-j8p6-96vp-f3r9\nGHSA-jfrm-rx66-g536\nGHSA-pgvv-q3wf-mm9m\nGHSA-pq7c-x8g4-rvp6\nGHSA-r6c9-g6q5-qrf9\nGHSA-vvmg-8mjr-g6q3\nGHSA-wp73-mwgf-4jq9",
       "d9b2d4ba7c18693fef27cf1ce661df0ebf680bd5": "Publish Advisories\n\nGHSA-36p8-mvp6-cv38\nGHSA-pchf-49fh-w34r\nGHSA-xxjr-mmjv-4gpg"
     },
-    "GHSA-M2H6-J472-RP4C": {
-      "814efda19d2741583137fa806c4409873d3099f4": "Improve GHSA-m2h6-j472-rp4c",
-      "40c4c7502491a71ba09c6debc6178fc052e1863a": "Publish Advisories\n\nGHSA-jwv3-5hgf-82ww\nGHSA-m2h6-j472-rp4c"
-    },
-    "GHSA-XHF4-832V-7XCR": {
-      "f04c2002607dc25500a017931fc22bc67591cefd": "Improve GHSA-xhf4-832v-7xcr",
-      "9ce964809ea7901a15e5c987082cf17e23fa2a95": "Publish GHSA-xhf4-832v-7xcr"
-    },
     "GHSA-P2PH-7G93-HW3M": {
       "7d09b1d73cfc6e7461c0117c84d99aefa0ba4141": "Publish GHSA-p2ph-7g93-hw3m",
       "8030799f750a5f730375ecc326e73fb74ed88bca": "Merge pull request #8177 from github/G-Rath-GHSA-p2ph-7g93-hw3m",
@@ -1506,12 +1546,6 @@
     "GHSA-4PH6-MJV7-3FQ6": {
       "9f282d72ec6eaf400bf8043c5994ed2c1752a2ba": "Publish GHSA-4ph6-mjv7-3fq6"
     },
-    "GHSA-9XQ9-36W5-Q796": {
-      "3d5d7d441fb990d9ff6ec98c1ba5c6d25dd5271f": "Improve GHSA-9xq9-36w5-q796",
-      "e02f0b1d19fd76b41d6baee13da9c2d2094bba76": "Publish Advisories\n\nGHSA-4hm9-844j-jmxp\nGHSA-wgjv-9j3q-jhg8\nGHSA-g857-hhfv-j68w\nGHSA-3363-2ph6-35wh\nGHSA-73jc-5mrq-prw7\nGHSA-799f-29jm-gr6c\nGHSA-9xq9-36w5-q796\nGHSA-h9cc-w26m-j342\nGHSA-jrrg-99xh-5j2q\nGHSA-m549-qq94-fvhg\nGHSA-mw3q-r9wh-h2ff\nGHSA-vghx-352f-93jm\nGHSA-wmhf-fqc8-vxhh\nGHSA-5g86-85rp-f9hx\nGHSA-8qhj-4f8c-j8qg\nGHSA-cj8g-prcm-mfg5\nGHSA-mqq6-462x-jxmm\nGHSA-vrmh-5mmx-hjwx",
-      "e4d0ff855ce7ff5837da1c14ad4b547784f09c1c": "Publish GHSA-9xq9-36w5-q796",
-      "7d8049e51ad706d7016304e96169eb910460918a": "Publish GHSA-9xq9-36w5-q796"
-    },
     "GHSA-8JJ7-4V57-FRF5": {
       "094a1606bc92ac7d9b9d5fba225b211ec3a52839": "Publish Advisories\n\nGHSA-8jj7-4v57-frf5\nGHSA-fwjf-m4qw-9f2x"
     },
@@ -6447,10 +6481,6 @@
     "GHSA-P5W8-M249-4R4V": {
       "8149c401a40c6ad64e8472094d8cd4f262a23962": "Publish GHSA-p5w8-m249-4r4v"
     },
-    "GHSA-7GCF-G7XR-8HXJ": {
-      "8ea647c02f421cae49f95930f1b7b7335877cc68": "Improve GHSA-7gcf-g7xr-8hxj",
-      "16ffcce02a17e462fdd9ad2ed1b36d4531f90c0e": "Publish Advisories\n\nGHSA-qmc5-gv6v-8p22\nGHSA-7gcf-g7xr-8hxj"
-    },
     "GHSA-X3HF-7CJ6-3R4M": {
       "45b2962f81309fb6661be10936f82d3f5e4b0e30": "Publish GHSA-x3hf-7cj6-3r4m"
     },
@@ -6771,18 +6801,6 @@
     "GHSA-M65R-RPRJ-R5RG": {
       "ccc5d227142d52d6a4e487116d305602aa4777a8": "Publish GHSA-m65r-rprj-r5rg"
     },
-    "GHSA-2R2C-CX56-8933": {
-      "073e611e4ca245277243eb6d55dfd7e60af18fab": "Improve GHSA-2r2c-cx56-8933",
-      "ffcf09d2985f26ec684f757049278a4b9426a47f": "Improve GHSA-2r2c-cx56-8933",
-      "a98ecc0a2017806af2e68e480b70154156d9c756": "Publish Advisories\n\nGHSA-7pr5-w74r-jjj7\nGHSA-2r2c-cx56-8933\nGHSA-3h6h-67x3-cv5x\nGHSA-3wrr-7qpf-2prh\nGHSA-47qp-hqvx-6r3f\nGHSA-4w6r-5c2j-qf5f\nGHSA-52fw-7fw2-fmv5\nGHSA-5hh8-q8hv-fr38\nGHSA-6mhr-74x2-98v9\nGHSA-9fxm-vc8v-hj55\nGHSA-g72g-r7m4-9x4g\nGHSA-gprh-27j3-g5h4\nGHSA-h6vv-pcq8-7xm4\nGHSA-hgj6-7826-r7m5\nGHSA-hmcr-rmjq-47qr\nGHSA-j3rv-43j4-c7qm\nGHSA-r989-7g3j-wjhw\nGHSA-rcqc-6cw3-h962\nGHSA-rmj7-2vxq-3g9f\nGHSA-g796-fgmg-93mv",
-      "3fdade359a569c7904e212331250ace917aff918": "Publish Advisories\n\nGHSA-2c85-rfcc-g74j\nGHSA-2r2c-cx56-8933\nGHSA-2vcc-5v34-9jc8\nGHSA-47qp-hqvx-6r3f\nGHSA-64mm-vxmg-q3vj\nGHSA-6x8v-2fq5-2229\nGHSA-94jp-7776-qj6q\nGHSA-gcq2-9pq2-cxqm"
-    },
-    "GHSA-47QP-HQVX-6R3F": {
-      "d20c5e8f1c60d98992daac422eafe5384b5c1978": "Improve GHSA-47qp-hqvx-6r3f",
-      "8e006d478bda57c4db78c71461a9fa0bba93e500": "Improve GHSA-47qp-hqvx-6r3f",
-      "a98ecc0a2017806af2e68e480b70154156d9c756": "Publish Advisories\n\nGHSA-7pr5-w74r-jjj7\nGHSA-2r2c-cx56-8933\nGHSA-3h6h-67x3-cv5x\nGHSA-3wrr-7qpf-2prh\nGHSA-47qp-hqvx-6r3f\nGHSA-4w6r-5c2j-qf5f\nGHSA-52fw-7fw2-fmv5\nGHSA-5hh8-q8hv-fr38\nGHSA-6mhr-74x2-98v9\nGHSA-9fxm-vc8v-hj55\nGHSA-g72g-r7m4-9x4g\nGHSA-gprh-27j3-g5h4\nGHSA-h6vv-pcq8-7xm4\nGHSA-hgj6-7826-r7m5\nGHSA-hmcr-rmjq-47qr\nGHSA-j3rv-43j4-c7qm\nGHSA-r989-7g3j-wjhw\nGHSA-rcqc-6cw3-h962\nGHSA-rmj7-2vxq-3g9f\nGHSA-g796-fgmg-93mv",
-      "3fdade359a569c7904e212331250ace917aff918": "Publish Advisories\n\nGHSA-2c85-rfcc-g74j\nGHSA-2r2c-cx56-8933\nGHSA-2vcc-5v34-9jc8\nGHSA-47qp-hqvx-6r3f\nGHSA-64mm-vxmg-q3vj\nGHSA-6x8v-2fq5-2229\nGHSA-94jp-7776-qj6q\nGHSA-gcq2-9pq2-cxqm"
-    },
     "GHSA-HCJR-322H-429R": {
       "9f2122f00517f397a625bcc061bd2d2e0983b8e4": "Improve GHSA-hcjr-322h-429r",
       "49899a53e9c2e620c99e0234afe3c50e512ad851": "Publish Advisories\n\nGHSA-29gr-w86r-vj34\nGHSA-33r9-fx8q-w69h\nGHSA-4w7g-2ph6-pm6g\nGHSA-5827-wp8x-c8xh\nGHSA-5hp5-q35j-vjpg\nGHSA-c269-4hpf-qfhc\nGHSA-ccmw-x5fc-v2mm\nGHSA-cwxf-7cw2-7r32\nGHSA-f943-xhh7-7c5g\nGHSA-fqc6-vqq8-5xwp\nGHSA-hcjr-322h-429r\nGHSA-j33g-47h2-2687\nGHSA-vjx2-fp9g-q2mc\nGHSA-w35c-8999-xv6m"
@@ -13781,10 +13799,6 @@
     "GHSA-VR7M-C6V4-8CX8": {
       "b3d28896b73bc777a81265177bb7b5d6378a432e": "Publish Advisories\n\nGHSA-4c39-fwgj-4vq7\nGHSA-5j6p-jrrm-6x94\nGHSA-vr7m-c6v4-8cx8"
     },
-    "GHSA-5739-39V2-5754": {
-      "da50dc4d263c11b6fa600d4948b972a481cd518e": "Improve GHSA-5739-39v2-5754",
-      "64283be75bd0da05060e4b79e269d888932dcbab": "Publish GHSA-5739-39v2-5754"
-    },
     "GHSA-WQPV-C3PP-3M58": {
       "202f6fb9dae267e3b20cf3af1e7eaa7618f4599c": "Publish Advisories\n\nGHSA-wqpv-c3pp-3m58\nGHSA-7g26-2qgj-chfg\nGHSA-8x9c-mqxv-q2pp\nGHSA-96hv-2xvq-fx4p",
       "dd83403d226ec1caa99b6ccf126a92e431c87309": "Publish Advisories\n\nGHSA-4hxw-gc2q-f6f3\nGHSA-pvcv-q3q7-266g\nGHSA-25qr-6mpr-f7qx\nGHSA-2943-crp8-38xx\nGHSA-29rg-wmcw-hpf4\nGHSA-2g7h-7rqr-9p4r\nGHSA-2vq4-854f-5c72\nGHSA-wqpv-c3pp-3m58\nGHSA-4g73-w726-53h3\nGHSA-9rh9-hf3w-9fgg\nGHSA-f946-9qp6-vgch",

data/fix-commits/buildroot-0b809119.json

@@ -1,6 +1,18 @@
 {
   "vcs_url": "https://github.com/buildroot/buildroot",
   "vulnerabilities": {
+    "CVE-2026-66046": {
+      "4c504ef75df4caf58acd20c02c9b2993708b1390": "package/expat: security bump version to 2.8.4\n\nhttps://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes\nhttps://blog.hartwork.org/posts/expat-2-8-4-released/\n\nFixes CVE-2026-66046, CVE-2026-76641, CVE-2026-76956 & CVE-2026-76957.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
+    },
+    "CVE-2026-76641": {
+      "4c504ef75df4caf58acd20c02c9b2993708b1390": "package/expat: security bump version to 2.8.4\n\nhttps://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes\nhttps://blog.hartwork.org/posts/expat-2-8-4-released/\n\nFixes CVE-2026-66046, CVE-2026-76641, CVE-2026-76956 & CVE-2026-76957.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
+    },
+    "CVE-2026-76956": {
+      "4c504ef75df4caf58acd20c02c9b2993708b1390": "package/expat: security bump version to 2.8.4\n\nhttps://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes\nhttps://blog.hartwork.org/posts/expat-2-8-4-released/\n\nFixes CVE-2026-66046, CVE-2026-76641, CVE-2026-76956 & CVE-2026-76957.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
+    },
+    "CVE-2026-76957": {
+      "4c504ef75df4caf58acd20c02c9b2993708b1390": "package/expat: security bump version to 2.8.4\n\nhttps://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes\nhttps://blog.hartwork.org/posts/expat-2-8-4-released/\n\nFixes CVE-2026-66046, CVE-2026-76641, CVE-2026-76956 & CVE-2026-76957.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
+    },
     "CVE-2026-10846": {
       "911dc3a5d28ca33a1e44358a5c4760a6eba1f9ae": "package/libldns: security bump version to 1.9.2\n\nhttps://community.nlnetlabs.nl/t/ldns-1-9-1-released/3403\nhttps://community.nlnetlabs.nl/t/ldns-1-9-2-released/3404\n\"Please do not install ldns version 1.9.1 as it has a wrong .so version.\n Install ldns version 1.9.2 instead.\"\n\nFixes CVE-2026-10846.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
     },