Sync Collecting Fix Commits: Wed Aug 26 13:04:00 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,35 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-65R4-943X-97JJ": {
+      "fdfded361988a00fcc130cad2aa7aad11362362c": "Improve GHSA-65r4-943x-97jj"
+    },
+    "GHSA-JWV3-5HGF-82WW": {
+      "3564fbcdd5b15aa14f5e9a09b840a84f2bb6d17f": "Improve GHSA-jwv3-5hgf-82ww",
+      "40c4c7502491a71ba09c6debc6178fc052e1863a": "Publish Advisories\n\nGHSA-jwv3-5hgf-82ww\nGHSA-m2h6-j472-rp4c"
+    },
+    "GHSA-F23M-R3PF-42RH": {
+      "3938c30b676bf2ab8686fa030a6eb9d0e965bd86": "Improve GHSA-f23m-r3pf-42rh",
+      "baa119329208019d4d12aeb8388b877fce4ae5dd": "Improve GHSA-f23m-r3pf-42rh",
+      "5d5860ea69261ec9e76d8d36f0a74da8559f2c85": "Publish Advisories\n\nGHSA-f23m-r3pf-42rh\nGHSA-r5fr-rjxr-66jc"
+    },
+    "GHSA-XXJR-MMJV-4GPG": {
+      "b6b0ffdfc2639471c8f42a16aba94b9e4e1a7391": "Improve GHSA-xxjr-mmjv-4gpg",
+      "9b115bcb42961239b1e131d63808b1230a4b4885": "Publish Advisories\n\nGHSA-xxjr-mmjv-4gpg\nGHSA-5hr4-253g-cpx2\nGHSA-qpc3-8vqg-8g6w\nGHSA-43g7-cwr8-q3jh\nGHSA-89c6-vpcj-7vj4\nGHSA-8rrq-wcg8-cv5q\nGHSA-962q-hwm5-52x5\nGHSA-9ccr-r5hg-74gf\nGHSA-c73c-x77g-854r\nGHSA-fjq3-ffvr-vm46\nGHSA-j8p6-96vp-f3r9\nGHSA-jfrm-rx66-g536\nGHSA-pgvv-q3wf-mm9m\nGHSA-pq7c-x8g4-rvp6\nGHSA-r6c9-g6q5-qrf9\nGHSA-vvmg-8mjr-g6q3\nGHSA-wp73-mwgf-4jq9",
+      "d9b2d4ba7c18693fef27cf1ce661df0ebf680bd5": "Publish Advisories\n\nGHSA-36p8-mvp6-cv38\nGHSA-pchf-49fh-w34r\nGHSA-xxjr-mmjv-4gpg"
+    },
+    "GHSA-M2H6-J472-RP4C": {
+      "814efda19d2741583137fa806c4409873d3099f4": "Improve GHSA-m2h6-j472-rp4c",
+      "40c4c7502491a71ba09c6debc6178fc052e1863a": "Publish Advisories\n\nGHSA-jwv3-5hgf-82ww\nGHSA-m2h6-j472-rp4c"
+    },
+    "GHSA-XHF4-832V-7XCR": {
+      "f04c2002607dc25500a017931fc22bc67591cefd": "Improve GHSA-xhf4-832v-7xcr",
+      "9ce964809ea7901a15e5c987082cf17e23fa2a95": "Publish GHSA-xhf4-832v-7xcr"
+    },
+    "GHSA-4GV3-MC9P-5WQC": {
+      "d639760de4feddc73e1e32c090a90684fc2f4cac": "Improve GHSA-4gv3-mc9p-5wqc",
+      "d7e409326b5ee1b8efddca7e1777509de8f97e84": "Improve GHSA-4gv3-mc9p-5wqc"
+    },
     "GHSA-P2PH-7G93-HW3M": {
       "7d09b1d73cfc6e7461c0117c84d99aefa0ba4141": "Publish GHSA-p2ph-7g93-hw3m",
       "8030799f750a5f730375ecc326e73fb74ed88bca": "Merge pull request #8177 from github/G-Rath-GHSA-p2ph-7g93-hw3m",
@@ -145,9 +174,6 @@
     "GHSA-VFP3-V2GW-7WFQ": {
       "99e5ef50164e66adfa19d043a07124de76dedf18": "Publish GHSA-vfp3-v2gw-7wfq"
     },
-    "GHSA-4GV3-MC9P-5WQC": {
-      "d7e409326b5ee1b8efddca7e1777509de8f97e84": "Improve GHSA-4gv3-mc9p-5wqc"
-    },
     "GHSA-XX4J-W367-7247": {
       "388bd627649dac94270eb328a5b1598535c6c85a": "Publish GHSA-xx4j-w367-7247"
     },
@@ -4929,9 +4955,6 @@
     "GHSA-3X6R-WXXG-53VV": {
       "cd2f3558209d21fce4f60c144f3d8df21a4313b0": "Publish GHSA-3x6r-wxxg-53vv"
     },
-    "GHSA-XHF4-832V-7XCR": {
-      "9ce964809ea7901a15e5c987082cf17e23fa2a95": "Publish GHSA-xhf4-832v-7xcr"
-    },
     "GHSA-45PQ-889G-FCGH": {
       "ac851e211db40786236103d388ce15d790894811": "Publish Advisories\n\nGHSA-45pq-889g-fcgh\nGHSA-cf44-9pgv-m4xc"
     },
@@ -5484,12 +5507,6 @@
       "28ed082bce2515ae1d1546d4f9bbb04506d2a99e": "Publish Advisories\n\nGHSA-866g-f22w-33x8\nGHSA-866g-f22w-33x8",
       "688dde48d9170a462afceaa51250cc086050754f": "Publish Advisories\n\nGHSA-3hwj-7r29-g5vv\nGHSA-cv2m-jfc5-xx45\nGHSA-xwqq-pcg2-pphr\nGHSA-2c7p-5h72-cjj3\nGHSA-34wv-75jw-6v6p\nGHSA-3qmj-qw66-fwx8\nGHSA-5x7m-fp78-pgfp\nGHSA-866g-f22w-33x8\nGHSA-8rqj-9gxc-63cr\nGHSA-9pj2-3x6v-c3pp\nGHSA-cvwm-vwhp-22jx\nGHSA-fgq5-p2r5-jrm5\nGHSA-hh8h-hxcj-2pm7\nGHSA-mwv7-rw63-qfm9\nGHSA-rpc6-9c4p-j5cg"
     },
-    "GHSA-JWV3-5HGF-82WW": {
-      "40c4c7502491a71ba09c6debc6178fc052e1863a": "Publish Advisories\n\nGHSA-jwv3-5hgf-82ww\nGHSA-m2h6-j472-rp4c"
-    },
-    "GHSA-M2H6-J472-RP4C": {
-      "40c4c7502491a71ba09c6debc6178fc052e1863a": "Publish Advisories\n\nGHSA-jwv3-5hgf-82ww\nGHSA-m2h6-j472-rp4c"
-    },
     "GHSA-G6CJ-PR64-35W5": {
       "b0d65853f6a47502fffffb9993a4ad44c3c52506": "Publish GHSA-g6cj-pr64-35w5"
     },
@@ -21744,10 +21761,6 @@
       "e2931a1bd7dedcd6ccedbe9700abca22ad9e73fc": "Publish Advisories\n\nGHSA-6g38-8j4p-j3pr\nGHSA-26g9-27vm-x3q8\nGHSA-3xc2-h5r3-wv3r\nGHSA-482j-2pq6-q5w4\nGHSA-5v3h-x4wf-5c35\nGHSA-69xw-7hcm-h432\nGHSA-72w5-pf8h-xfp4\nGHSA-765j-qfrp-hm3j\nGHSA-7p5m-v798-f8vv\nGHSA-8757-69j2-hx56\nGHSA-88gh-2526-gfrr\nGHSA-96ff-gc8g-wpvg\nGHSA-9rmh-mm8f-r9h6\nGHSA-9vqf-7f2p-gf9v\nGHSA-f3cj-j4f6-wq85\nGHSA-f84p-cvgm-xgjj\nGHSA-g29v-q6h7-76wh\nGHSA-h3ww-q6xx-w7x3\nGHSA-mqcg-5x36-vfcg\nGHSA-pgf8-2hgj-grqg\nGHSA-rcqx-6q8c-2c42\nGHSA-wx44-2q6h-j6p8",
       "2173a2078dcfca40db3f05fcb354b6bfc75a9d02": "Publish Advisories\n\nGHSA-j7j9-5253-f7vh\nGHSA-mqcg-5x36-vfcg"
     },
-    "GHSA-XXJR-MMJV-4GPG": {
-      "9b115bcb42961239b1e131d63808b1230a4b4885": "Publish Advisories\n\nGHSA-xxjr-mmjv-4gpg\nGHSA-5hr4-253g-cpx2\nGHSA-qpc3-8vqg-8g6w\nGHSA-43g7-cwr8-q3jh\nGHSA-89c6-vpcj-7vj4\nGHSA-8rrq-wcg8-cv5q\nGHSA-962q-hwm5-52x5\nGHSA-9ccr-r5hg-74gf\nGHSA-c73c-x77g-854r\nGHSA-fjq3-ffvr-vm46\nGHSA-j8p6-96vp-f3r9\nGHSA-jfrm-rx66-g536\nGHSA-pgvv-q3wf-mm9m\nGHSA-pq7c-x8g4-rvp6\nGHSA-r6c9-g6q5-qrf9\nGHSA-vvmg-8mjr-g6q3\nGHSA-wp73-mwgf-4jq9",
-      "d9b2d4ba7c18693fef27cf1ce661df0ebf680bd5": "Publish Advisories\n\nGHSA-36p8-mvp6-cv38\nGHSA-pchf-49fh-w34r\nGHSA-xxjr-mmjv-4gpg"
-    },
     "GHSA-5HR4-253G-CPX2": {
       "9b115bcb42961239b1e131d63808b1230a4b4885": "Publish Advisories\n\nGHSA-xxjr-mmjv-4gpg\nGHSA-5hr4-253g-cpx2\nGHSA-qpc3-8vqg-8g6w\nGHSA-43g7-cwr8-q3jh\nGHSA-89c6-vpcj-7vj4\nGHSA-8rrq-wcg8-cv5q\nGHSA-962q-hwm5-52x5\nGHSA-9ccr-r5hg-74gf\nGHSA-c73c-x77g-854r\nGHSA-fjq3-ffvr-vm46\nGHSA-j8p6-96vp-f3r9\nGHSA-jfrm-rx66-g536\nGHSA-pgvv-q3wf-mm9m\nGHSA-pq7c-x8g4-rvp6\nGHSA-r6c9-g6q5-qrf9\nGHSA-vvmg-8mjr-g6q3\nGHSA-wp73-mwgf-4jq9",
       "6b6ed7cf34e762abe34c691a4e59661e19bd08bf": "Publish Advisories\n\nGHSA-5hr4-253g-cpx2\nGHSA-qj83-cq47-w5f8",
@@ -37282,10 +37295,6 @@
       "73931721935fee36eab1bc6e7fd4240ce68ac363": "Publish Advisories\n\nGHSA-2wvg-62qm-gj33\nGHSA-3p65-76g6-3w7r\nGHSA-436g-fhfc-9g5w\nGHSA-4q27-4rrq-fx95\nGHSA-5ghq-42rg-769x\nGHSA-6326-w46w-ppjw\nGHSA-737v-mqg7-c878\nGHSA-73jv-44c3-j5p2\nGHSA-9cqf-439c-j96r\nGHSA-cqgf-f4x7-g6wc\nGHSA-fgv4-6jr3-jgfw\nGHSA-hm7r-c7qw-ghp6\nGHSA-jg4p-7fhp-p32p\nGHSA-mcv8-8m8x-48pg\nGHSA-rp9m-7r4c-75qg\nGHSA-v959-cwq9-7hr6\nGHSA-vr5f-2r24-w5hc\nGHSA-x9w5-xccw-5h9w",
       "91424b911adc359fc0b5c1a55ab7950dd697f2da": "Publish Advisories\n\nGHSA-g8mv-vp7j-qp64\nGHSA-jg56-wf8x-qrv5\nGHSA-rp9m-7r4c-75qg"
     },
-    "GHSA-F23M-R3PF-42RH": {
-      "baa119329208019d4d12aeb8388b877fce4ae5dd": "Improve GHSA-f23m-r3pf-42rh",
-      "5d5860ea69261ec9e76d8d36f0a74da8559f2c85": "Publish Advisories\n\nGHSA-f23m-r3pf-42rh\nGHSA-r5fr-rjxr-66jc"
-    },
     "GHSA-3CCH-WJ7F-8G8X": {
       "44f77751f6ab624aa2c082abc92597eee89c3292": "Publish Advisories\n\nGHSA-3cch-wj7f-8g8x\nGHSA-2gmw-2prf-4jf5\nGHSA-3vcr-g3hm-2qr2\nGHSA-4w7x-xp7v-5wc2\nGHSA-5cr3-m7xx-pv5v\nGHSA-5mxp-jr6r-r378\nGHSA-7fvw-v44w-rxj9\nGHSA-8xj5-wfhm-66px\nGHSA-f474-j5g7-2pch\nGHSA-gr8m-rq4x-q7c8\nGHSA-hwr5-vgw5-5q99\nGHSA-p356-q857-c7qx\nGHSA-pfxv-5cjm-vgpg\nGHSA-rcpv-9747-gv3q\nGHSA-wm9p-h6hw-5vx8\nGHSA-x8v6-ww3x-gccf\nGHSA-xg9f-423r-vcp9\nGHSA-xw7j-84mx-6v67",
       "86a05628d1141d4a6829f8cbe94e2c907ad9243d": "Publish Advisories\n\nGHSA-4f3f-7mf9-qrhc\nGHSA-3cch-wj7f-8g8x\nGHSA-g8px-v54r-425j\nGHSA-j6q3-j45m-mw2x\nGHSA-rxfv-ppqf-vp64",

data/fix-commits/neovim-ab74b3b5.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://github.com/neovim/neovim",
   "vulnerabilities": {
+    "GHSA-R77M-8M55-RPR6": {
+      "f9186e0c0ebb3f9e47dd1e97382772a0d30e5728": "vim-patch:9.2.1011: [security]: arbitrary Ex command execution during C omni-completion (#41501)\n\nProblem:  arbitrary Ex command execution during C omni-completion via\n          tag file names (Yazan Balawneh)\nSolution: Escape the | for all returned tag files\n\nGithub Security Advisory:\nhttps://github.com/vim/vim/security/advisories/GHSA-r77m-8m55-rpr6\n\nhttps://github.com/vim/vim/commit/331d5d67028505c5b6043603a57d1e8497b922b5\n\nCo-authored-by: Christian Brabandt <cb@256bit.org>"
+    },
     "GHSA-9JQX-HGPR-6V64": {
       "ba0e5b25bcaf307019b619db25bd19c78bb59846": "vim-patch:9.2.0846: [security]: heap buffer overflow in set_sofo()\n\nProblem:  [security]: heap buffer overflow in set_sofo()\n          (Yazan Balawneh)\nSolution: Reset sl_sal_first (Yasuhiro Matsumoto).\n\nA crafted spell file with an empty SN_SAL section before an SN_SOFO\nsection reaches set_sofo() with sl_sal_first[] already set to -1 by\nset_sal_first(). The counting loop then under-counts colliding\nmulti-byte \"from\" characters, allocates an undersized list and writes\npast its end.\n\nGithub Security Advisory:\nhttps://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64\n\nhttps://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a\n\nCo-authored-by: Yasuhiro Matsumoto <mattn.jp@gmail.com>"
     },

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,12 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-38076": {
+      "818c88fc30319da0876337b50160ff7b400245ad": "[Backport staging-26.05] jbig2dec: fix CVE-2026-38076 (#556644)",
+      "2fa3bfecf915eb9ad02c0160b885e67204b9e4c5": "jbig2dec: fix CVE-2026-38076\n\nBackport the upstream validation for oversized IAID symbol-code lengths.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit c98d4a91a1df111f427ad8e1159f7cade729fc00)",
+      "43cfa7b694393b8823693d1e24d782827ac25800": "jbig2dec: fix CVE-2026-38076 (#556361)",
+      "c98d4a91a1df111f427ad8e1159f7cade729fc00": "jbig2dec: fix CVE-2026-38076\n\nBackport the upstream validation for oversized IAID symbol-code lengths.\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
+    },
     "CVE-2026-66484": {
       "c50bb9a2a99e5de5b23de3d007c12a32639e9485": "[Backport staging-26.05] cpio: patch CVE-2026-66484, CVE-2026-66485, and CVE-2026-66486 (#552822)",
       "e9ee2233cee89ca3dbe4aaad77e43ac08ca5fa70": "cpio: patch CVE-2026-66484, CVE-2026-66485, and CVE-2026-66486\n\n(cherry picked from commit b2dbab49281688bdf6e2bfc72cf165e1c77c4c53)",