Sync Collecting Fix Commits: Mon Jul 20 07:55:13 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,31 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-FH6J-MGH8-7PRH": {
+      "f37077e857e7a28bab83d284c23299407fb1af7e": "Publish Advisories\n\nGHSA-fh6j-mgh8-7prh\nGHSA-cg4c-j43f-qcg7"
+    },
+    "GHSA-CG4C-J43F-QCG7": {
+      "f37077e857e7a28bab83d284c23299407fb1af7e": "Publish Advisories\n\nGHSA-fh6j-mgh8-7prh\nGHSA-cg4c-j43f-qcg7"
+    },
+    "GHSA-7PPG-37FH-VCR6": {
+      "4544d3857250fe21711ce8febf38e8822729678f": "Publish Advisories\n\nGHSA-7ppg-37fh-vcr6\nGHSA-55f6-pf8r-c2f4",
+      "fce1a67836ce1244a630d4b5467dc72e1907c113": "Publish GHSA-7ppg-37fh-vcr6",
+      "8cdd1d44d23e2b1924753a87423ada48eb15bae8": "Merge pull request #7924 from cookesan/add-ghsa-7ppg-37fh-vcr6-reference",
+      "4bd70c9b8b2d4d04248b05850ff029ba4de1d218": "Add fix reference to GHSA-7ppg-37fh-vcr6",
+      "c43f218478fc69dba29ec540b5f952fb7a7fa74c": "Improve GHSA-7ppg-37fh-vcr6",
+      "72d21846d34d5522e8d13a87d27529d037e973c2": "Publish GHSA-7ppg-37fh-vcr6",
+      "be30634bb0eaa4fdd8859ab1803ad1e7b7a53ebd": "Publish GHSA-7ppg-37fh-vcr6"
+    },
+    "GHSA-55F6-PF8R-C2F4": {
+      "4544d3857250fe21711ce8febf38e8822729678f": "Publish Advisories\n\nGHSA-7ppg-37fh-vcr6\nGHSA-55f6-pf8r-c2f4",
+      "d35e904d3e9465e5efd27d1bc79465bc4b4c5849": "Publish GHSA-55f6-pf8r-c2f4"
+    },
+    "GHSA-V2W2-W228-C444": {
+      "cdfc8886d71af7ef3bdab3e4db46753ff8af6538": "Publish GHSA-v2w2-w228-c444"
+    },
+    "GHSA-3VGG-7H5G-62MM": {
+      "33feba2c9673383c3b0bd53906c89ac975feadd8": "Improve GHSA-3vgg-7h5g-62mm"
+    },
     "GHSA-98VV-9PQJ-G87V": {
       "c8f350b3685ed03be36ed14adc2d433d3f2f9d2b": "Improve GHSA-98vv-9pqj-g87v"
     },
@@ -4010,9 +4035,6 @@
     "GHSA-XJ53-J257-HXVG": {
       "5d63da72333427fffcd13a4b99a35aefcd3c8151": "Publish Advisories\n\nGHSA-565m-g33j-jq96\nGHSA-xj53-j257-hxvg"
     },
-    "GHSA-55F6-PF8R-C2F4": {
-      "d35e904d3e9465e5efd27d1bc79465bc4b4c5849": "Publish GHSA-55f6-pf8r-c2f4"
-    },
     "GHSA-HRVG-GX3J-WH53": {
       "7de7cf6523433661a9a067aab7dcd94c250c9f24": "Publish Advisories\n\nGHSA-hrvg-gx3j-wh53\nGHSA-hrvg-gx3j-wh53",
       "df1219bb5b39fcfa479a100ca54f1b9a7a992ce2": "Publish Advisories\n\nGHSA-4r3q-94wc-xhq9\nGHSA-7rcm-w6ff-j43w\nGHSA-83c5-hghm-jg6r\nGHSA-8rrv-fjvg-6vcx\nGHSA-g8f4-g673-rfw2\nGHSA-h632-qvv7-2623\nGHSA-hrvg-gx3j-wh53\nGHSA-jmf7-79p7-qchq\nGHSA-jrjj-9h77-6vhv\nGHSA-qghv-8h77-699v\nGHSA-v5fw-q4pf-8p2h\nGHSA-vx29-rwgr-834p\nGHSA-wj42-v2p3-fq2w\nGHSA-x3cp-4x6w-vm7p"
@@ -4101,14 +4123,6 @@
       "c29c69ee634621c73ccab63b6b35a4f701302453": "Publish Advisories\n\nGHSA-82v2-f875-73g9\nGHSA-9fq2-x9r6-wfmf",
       "f8b097f12e0931fe172c26aac7c3a229cb724c6a": "Publish GHSA-9fq2-x9r6-wfmf"
     },
-    "GHSA-7PPG-37FH-VCR6": {
-      "fce1a67836ce1244a630d4b5467dc72e1907c113": "Publish GHSA-7ppg-37fh-vcr6",
-      "8cdd1d44d23e2b1924753a87423ada48eb15bae8": "Merge pull request #7924 from cookesan/add-ghsa-7ppg-37fh-vcr6-reference",
-      "4bd70c9b8b2d4d04248b05850ff029ba4de1d218": "Add fix reference to GHSA-7ppg-37fh-vcr6",
-      "c43f218478fc69dba29ec540b5f952fb7a7fa74c": "Improve GHSA-7ppg-37fh-vcr6",
-      "72d21846d34d5522e8d13a87d27529d037e973c2": "Publish GHSA-7ppg-37fh-vcr6",
-      "be30634bb0eaa4fdd8859ab1803ad1e7b7a53ebd": "Publish GHSA-7ppg-37fh-vcr6"
-    },
     "GHSA-747F-WW56-4Q4H": {
       "729d3fcf171e5ca0f1cdfa231a5d9b830198a6b6": "Publish Advisories\n\nGHSA-747f-ww56-4q4h\nGHSA-7p5m-v798-f8vv",
       "14b9cb0017d0897d24c7e8938d31464cb4687a1c": "Publish Advisories\n\nGHSA-5ccf-884p-4jjq\nGHSA-6gmf-2369-c76c\nGHSA-747f-ww56-4q4h\nGHSA-w6hh-w36c-vxmw"

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,12 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-58447": {
+      "2d86cdb005a9d59c19f82f7458e95edb66f3e34c": "[Backport release-26.05] invidious: patch CVE-2026-58447 (#543606)",
+      "a9855787eea2f8cb87b225a07c35ccd36aee43fe": "invidious: patch CVE-2026-58447\n\nhttps://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45\n\nhttps://tracker.security.nixos.org/suggestions/by-id/10419/\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit 4c54c8b8794c7a32970827d34d61974464a03bcf)",
+      "d941dd9cafc4a14aa4a0b10dba07eb61a33a06ba": "invidious: patch CVE-2026-58447 (#543507)",
+      "4c54c8b8794c7a32970827d34d61974464a03bcf": "invidious: patch CVE-2026-58447\n\nhttps://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45\n\nhttps://tracker.security.nixos.org/suggestions/by-id/10419/\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
+    },
     "CVE-2026-15899": {
       "e3759cac343b1f508613ac53554475e0871e7d5d": "ungoogled-chromium: 150.0.7871.124-1 -> 150.0.7871.128-1\n\nhttps://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_049796704.html\n\nThis update includes 7 security fixes.\n\nCVEs:\nCVE-2026-15899 CVE-2026-15900 CVE-2026-15901 CVE-2026-15902\nCVE-2026-15903 CVE-2026-15904 CVE-2026-15905\n\n(cherry picked from commit a077c7d5a2f1185c19f88f97ccb1eff618d02036)",
       "a077c7d5a2f1185c19f88f97ccb1eff618d02036": "ungoogled-chromium: 150.0.7871.124-1 -> 150.0.7871.128-1\n\nhttps://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_049796704.html\n\nThis update includes 7 security fixes.\n\nCVEs:\nCVE-2026-15899 CVE-2026-15900 CVE-2026-15901 CVE-2026-15902\nCVE-2026-15903 CVE-2026-15904 CVE-2026-15905",