Sync Collecting Fix Commits: Thu Aug 27 13:12:02 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,78 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-38FQ-H5HC-GWV8": {
+      "42bfbf98766e53fa129bc9fc599f769d2c1665b5": "Improve GHSA-38fq-h5hc-gwv8",
+      "cad702875104e93be688e6784310c2842597670d": "Publish GHSA-38fq-h5hc-gwv8"
+    },
+    "GHSA-JM7P-CC5G-QWXX": {
+      "7a6d8df4247a06afe5f20b0bfb44df847e565b55": "Improve GHSA-jm7p-cc5g-qwxx",
+      "b0467ffd9b47691183c0f7d21349e4b52ae34888": "Publish GHSA-jm7p-cc5g-qwxx"
+    },
+    "GHSA-6V4M-FW66-8R4X": {
+      "61449cb20149ad03420d365cd552d6f7431bca2e": "Publish Advisories\n\nGHSA-6v4m-fw66-8r4x\nGHSA-pppj-hq3g-57pj",
+      "1d67f4ad8430c8f4f250aef44ce3f0be0ae1fcf7": "Publish GHSA-6v4m-fw66-8r4x",
+      "128f2b08a3570be1c797603619185304a1afcb8a": "Publish Advisories\n\nGHSA-29w2-fq35-v728\nGHSA-6v4m-fw66-8r4x\nGHSA-86cx-wwf4-phq4\nGHSA-p6ph-3jx2-3337"
+    },
+    "GHSA-PPPJ-HQ3G-57PJ": {
+      "61449cb20149ad03420d365cd552d6f7431bca2e": "Publish Advisories\n\nGHSA-6v4m-fw66-8r4x\nGHSA-pppj-hq3g-57pj",
+      "59aa9029b97a64284cbd6c29c17f0c4bd08b6197": "Publish GHSA-pppj-hq3g-57pj",
+      "3b3e0c6dace1e53ea2fb8cc49db3e38b834c9179": "Publish Advisories\n\nGHSA-89vp-jrxv-24w8\nGHSA-gx64-gj6p-pc4c\nGHSA-pppj-hq3g-57pj"
+    },
+    "GHSA-2JGF-W345-55X3": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-3934-8PQH-QQ29": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-5JP2-W3VG-5W3X": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-647V-4254-WP99": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-653Q-GPWQ-HVHW": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-77F3-QJ56-X322": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-893M-8V6W-F7GR": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-9J4G-GRW7-5966": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-C599-M66R-V62W": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-CMJM-96FF-348R": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-FG4Q-58FC-39W8": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-FM3P-F44P-HF47": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-MQCP-4543-826G": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-P9XF-3946-VR35": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-QMJ8-W7C8-VHGX": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-R93X-R7QX-VP33": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-WH6X-77FW-HCQH": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
+    "GHSA-XMH6-7768-658C": {
+      "3d59c544c7c9c58d65340d458c318df0c75ba437": "Publish Advisories\n\nGHSA-2jgf-w345-55x3\nGHSA-3934-8pqh-qq29\nGHSA-5jp2-w3vg-5w3x\nGHSA-647v-4254-wp99\nGHSA-653q-gpwq-hvhw\nGHSA-77f3-qj56-x322\nGHSA-893m-8v6w-f7gr\nGHSA-9j4g-grw7-5966\nGHSA-c599-m66r-v62w\nGHSA-cmjm-96ff-348r\nGHSA-fg4q-58fc-39w8\nGHSA-fm3p-f44p-hf47\nGHSA-mqcp-4543-826g\nGHSA-p9xf-3946-vr35\nGHSA-qmj8-w7c8-vhgx\nGHSA-r93x-r7qx-vp33\nGHSA-wh6x-77fw-hcqh\nGHSA-xmh6-7768-658c"
+    },
     "GHSA-WFX3-6G53-9FGC": {
       "1f3aa114cdb32de955cb69c115d9d96262d0f0c6": "Publish GHSA-wfx3-6g53-9fgc",
       "ea709ff65fe75d7e4cd29cd61563a92cb66d14ed": "Publish Advisories\n\nGHSA-f3f2-mcxc-pwjx\nGHSA-wfx3-6g53-9fgc\nGHSA-q4fm-pjq6-m63g\nGHSA-pmpg-6pww-fg6q",
@@ -3483,10 +3555,6 @@
       "77646ef63dd1f2829e4ca5c98995ea9b43b170b0": "Publish GHSA-xmf8-cvqr-rfgj",
       "24358dc544a68e7b01076c3b8b3e0b4e427c36ae": "Publish GHSA-xmf8-cvqr-rfgj"
     },
-    "GHSA-PPPJ-HQ3G-57PJ": {
-      "59aa9029b97a64284cbd6c29c17f0c4bd08b6197": "Publish GHSA-pppj-hq3g-57pj",
-      "3b3e0c6dace1e53ea2fb8cc49db3e38b834c9179": "Publish Advisories\n\nGHSA-89vp-jrxv-24w8\nGHSA-gx64-gj6p-pc4c\nGHSA-pppj-hq3g-57pj"
-    },
     "GHSA-89VP-JRXV-24W8": {
       "e49e4e89a935aa2ffd2d3fc414406a79139a15cf": "Publish Advisories\n\nGHSA-89vp-jrxv-24w8\nGHSA-gx64-gj6p-pc4c",
       "3b3e0c6dace1e53ea2fb8cc49db3e38b834c9179": "Publish Advisories\n\nGHSA-89vp-jrxv-24w8\nGHSA-gx64-gj6p-pc4c\nGHSA-pppj-hq3g-57pj"
@@ -3503,10 +3571,6 @@
       "a96268500947b379b868496c69642ad8794ad219": "Publish Advisories\n\nGHSA-gm3r-q2wp-hw87\nGHSA-w4hw-qcx7-56pr",
       "7ce51bd846ba88af19b568dc25af0a2629296507": "Publish Advisories\n\nGHSA-6xj8-qv9j-xcjq\nGHSA-fp43-vj7g-pg92\nGHSA-fwjx-9p69-h25h\nGHSA-gm3r-q2wp-hw87\nGHSA-q53c-4prm-w95q\nGHSA-w4hw-qcx7-56pr"
     },
-    "GHSA-6V4M-FW66-8R4X": {
-      "1d67f4ad8430c8f4f250aef44ce3f0be0ae1fcf7": "Publish GHSA-6v4m-fw66-8r4x",
-      "128f2b08a3570be1c797603619185304a1afcb8a": "Publish Advisories\n\nGHSA-29w2-fq35-v728\nGHSA-6v4m-fw66-8r4x\nGHSA-86cx-wwf4-phq4\nGHSA-p6ph-3jx2-3337"
-    },
     "GHSA-Q53C-4PRM-W95Q": {
       "fc13cd42d73b9a3e0ba5c972df40ca0977d38084": "Publish Advisories\n\nGHSA-q53c-4prm-w95q\nGHSA-gqgw-jghv-mxwx",
       "83e7f1be9033b23968c34f52ca76ee57116d9b0c": "Use two affected entries instead of multiple introduced events\n\nThe advisory-improvement processor rejects more than one introduced event\nper affected package. Express the two patched branches the supported way,\nmatching GHSA-q53c-4prm-w95q. Version semantics are unchanged.",
@@ -5146,9 +5210,6 @@
     "GHSA-PFMC-3MGC-P6FP": {
       "3d86712fb90eb28d1e71aedbd9b63a440dfe14a2": "Publish GHSA-pfmc-3mgc-p6fp"
     },
-    "GHSA-JM7P-CC5G-QWXX": {
-      "b0467ffd9b47691183c0f7d21349e4b52ae34888": "Publish GHSA-jm7p-cc5g-qwxx"
-    },
     "GHSA-V7GR-MQPJ-WWH3": {
       "4795f85dfa125b049dcf55cee820ee1839f5569c": "Publish Advisories\n\nGHSA-v7gr-mqpj-wwh3\nGHSA-h2xq-h7f9-vh6c",
       "b951f6b9d06d39c5b8969afb34293c4be0830d46": "Merge pull request #8139 from github/sealbenb-GHSA-v7gr-mqpj-wwh3",
@@ -221953,9 +222014,6 @@
     "GHSA-6V7P-J23V-4XMW": {
       "eca2754a89870888b2cfb17c21d03c4ab5347fd9": "Publish GHSA-6v7p-j23v-4xmw"
     },
-    "GHSA-38FQ-H5HC-GWV8": {
-      "cad702875104e93be688e6784310c2842597670d": "Publish GHSA-38fq-h5hc-gwv8"
-    },
     "GHSA-G4P8-G7MQ-WPX4": {
       "95b73eb532aca44c313fdcd2f9afbd0f10279548": "Publish Advisories\n\nGHSA-3q5p-3558-364f\nGHSA-g4p8-g7mq-wpx4"
     },