Sync Collecting Fix Commits: Fri Aug 14 13:29:47 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,75 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-4336-PF6G-HP94": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-4F74-RPCH-F3GC": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-4PVG-RX6R-X5MJ": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-8W2R-9WR9-7G8J": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-94FH-FVRP-53C2": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-QP43-7266-QHGQ": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-QR8Q-RV2P-7CJH": {
+      "37f259e500d68dec361b264b9a3027fc0a715088": "Publish Advisories\n\nGHSA-4336-pf6g-hp94\nGHSA-4f74-rpch-f3gc\nGHSA-4pvg-rx6r-x5mj\nGHSA-8w2r-9wr9-7g8j\nGHSA-94fh-fvrp-53c2\nGHSA-qp43-7266-qhgq\nGHSA-qr8q-rv2p-7cjh"
+    },
+    "GHSA-F43V-WH9X-RGQ6": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-R6J9-RWX4-QCJ3": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-2F2V-C79P-8X4X": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-4954-43CR-FHMH": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-5VQC-RG5P-3CGM": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-69J3-R66P-RG4R": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-8R5C-H8X2-G6V4": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-8W38-952G-3W28": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-F4P3-JH6P-W9R7": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-HHJM-G2C9-8GPF": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-HRJQ-F2XJ-8982": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-RGF3-297C-WWGM": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-W66Q-5X8W-9JJM": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-WQWQ-HMG7-Q93R": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-XQ4W-6936-W8H4": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
+    "GHSA-XQXV-Q9JF-7CWC": {
+      "5b4078eb186bcf2ebaf51bb71c23e1fa81da068e": "Publish Advisories\n\nGHSA-f43v-wh9x-rgq6\nGHSA-r6j9-rwx4-qcj3\nGHSA-2f2v-c79p-8x4x\nGHSA-4954-43cr-fhmh\nGHSA-5vqc-rg5p-3cgm\nGHSA-69j3-r66p-rg4r\nGHSA-8r5c-h8x2-g6v4\nGHSA-8w38-952g-3w28\nGHSA-f4p3-jh6p-w9r7\nGHSA-hhjm-g2c9-8gpf\nGHSA-hrjq-f2xj-8982\nGHSA-rgf3-297c-wwgm\nGHSA-w66q-5x8w-9jjm\nGHSA-wqwq-hmg7-q93r\nGHSA-xq4w-6936-w8h4\nGHSA-xqxv-q9jf-7cwc"
+    },
     "GHSA-36JR-MH4H-2G58": {
       "e5cd38e04446540cd1a831d5653237b978843c43": "Publish GHSA-36jr-mh4h-2g58",
       "9b7143f40cd804a701d425dad74297906a3780f3": "Publish GHSA-36jr-mh4h-2g58",

data/fix-commits/nixpkgs-97436190.json

@@ -21,6 +21,18 @@
       "663dd55dcc4efb166b6839fc85f67043c024abe5": "python3Packages.unearth: fix CVE-2026-73030 (#551542)",
       "a34877a5d64ecf457971af72c6dd5f5858320eee": "python3Packages.unearth: fix CVE-2026-73030\n\nApply upstream path normalization and symlink target validation to prevent tar archives from writing outside the extraction directory.\n\nhttps://redirect.github.com/frostming/unearth/commit/6c78164e7bfa28b8b3d6f247b87e560692e3c8ba\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
     },
+    "CVE-2026-15268": {
+      "9d80977ece9b31cfb30b65f83e9fba21b1ccc083": "libvirt: fix security vulnerabilities\n\nFixes: CVE-2026-15268\nFixes: CVE-2026-18917\nFixes: CVE-2026-63622\nFixes: CVE-2026-63623\nNot-cherry-picked-because: Unstable is already on newer libvirt versions"
+    },
+    "CVE-2026-18917": {
+      "9d80977ece9b31cfb30b65f83e9fba21b1ccc083": "libvirt: fix security vulnerabilities\n\nFixes: CVE-2026-15268\nFixes: CVE-2026-18917\nFixes: CVE-2026-63622\nFixes: CVE-2026-63623\nNot-cherry-picked-because: Unstable is already on newer libvirt versions"
+    },
+    "CVE-2026-63622": {
+      "9d80977ece9b31cfb30b65f83e9fba21b1ccc083": "libvirt: fix security vulnerabilities\n\nFixes: CVE-2026-15268\nFixes: CVE-2026-18917\nFixes: CVE-2026-63622\nFixes: CVE-2026-63623\nNot-cherry-picked-because: Unstable is already on newer libvirt versions"
+    },
+    "CVE-2026-63623": {
+      "9d80977ece9b31cfb30b65f83e9fba21b1ccc083": "libvirt: fix security vulnerabilities\n\nFixes: CVE-2026-15268\nFixes: CVE-2026-18917\nFixes: CVE-2026-63622\nFixes: CVE-2026-63623\nNot-cherry-picked-because: Unstable is already on newer libvirt versions"
+    },
     "CVE-2026-19654": {
       "ed8301925e1e6bf169dfbe0a49d1be58fc61afda": "[Backport release-26.05] rsyslog: fix CVE-2026-19654 (#552242)",
       "d3c01fced9dd0429700369918b24a13820c01bb0": "rsyslog: fix CVE-2026-19654\n\nGuard imptcp regex framing against submitting a negative message length\nafter oversize-frame recovery.\n\nhttps://redirect.github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29\nhttps://redirect.github.com/rsyslog/rsyslog/commit/f7f774228273730ba1075f4cd457ae78303a8f08\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit d5f0e6289907d5e632998c84963452ff6f04f5c0)",