Sync Collecting Fix Commits: Mon Sep 14 02:34:21 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,61 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-24FC-F4HV-4G58": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-2W92-F48X-MMWF": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-2XP8-XG4H-RRR9": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-3M74-XPCG-JFRW": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-4983-R678-HFH4": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-8JWP-4QFM-P6R2": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-923G-F8RQ-PV4W": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-GR3M-MW36-G475": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-GX4H-W6XV-9V4J": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-GXV2-393Q-4J5X": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-HQ64-JGXG-V8CF": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-MXM9-VWR5-58FG": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-RW8X-XFX6-C82H": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-VP63-FQG3-CPH4": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-X36X-QPCF-QWFJ": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-XXXM-JWV4-XMV7": {
+      "e6836f18babd185bc5991edfb70aaf91e991b8c1": "Publish Advisories\n\nGHSA-24fc-f4hv-4g58\nGHSA-2w92-f48x-mmwf\nGHSA-2xp8-xg4h-rrr9\nGHSA-3m74-xpcg-jfrw\nGHSA-4983-r678-hfh4\nGHSA-8jwp-4qfm-p6r2\nGHSA-923g-f8rq-pv4w\nGHSA-gr3m-mw36-g475\nGHSA-gx4h-w6xv-9v4j\nGHSA-gxv2-393q-4j5x\nGHSA-hq64-jgxg-v8cf\nGHSA-mxm9-vwr5-58fg\nGHSA-rw8x-xfx6-c82h\nGHSA-vp63-fqg3-cph4\nGHSA-x36x-qpcf-qwfj\nGHSA-xxxm-jwv4-xmv7"
+    },
+    "GHSA-53PF-4457-QG7G": {
+      "b3a4476b9666ca32b72e6d1c76c87827ff74d8ac": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cw3c-9w3h-vf4q",
+      "aa68f3b4c13f890e893747cf41cf76110ddadfff": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cq44-x9vf-fpqg"
+    },
+    "GHSA-CW3C-9W3H-VF4Q": {
+      "b3a4476b9666ca32b72e6d1c76c87827ff74d8ac": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cw3c-9w3h-vf4q"
+    },
     "GHSA-2X7F-7273-JX2J": {
       "955bdfd4137b2593688bc79426039bdf773e9800": "Publish Advisories\n\nGHSA-2x7f-7273-jx2j\nGHSA-63h9-9gmf-c466\nGHSA-j3hr-9jf2-7jhv\nGHSA-vmr6-g39x-qp82"
     },
@@ -2046,9 +2101,6 @@
     "GHSA-PFMG-M2FV-V732": {
       "b17707d977356935d32a5d9d665f67ee80969e82": "Publish Advisories\n\nGHSA-92px-7r7f-w562\nGHSA-jrwc-g36x-gqc7\nGHSA-pfmg-m2fv-v732"
     },
-    "GHSA-53PF-4457-QG7G": {
-      "aa68f3b4c13f890e893747cf41cf76110ddadfff": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cq44-x9vf-fpqg"
-    },
     "GHSA-CQ44-X9VF-FPQG": {
       "aa68f3b4c13f890e893747cf41cf76110ddadfff": "Publish Advisories\n\nGHSA-53pf-4457-qg7g\nGHSA-cq44-x9vf-fpqg",
       "6d3aba94b45563b2202a6f7bfa7223bfa46bf3f9": "Publish Advisories\n\nGHSA-2c9f-8whq-v3fc\nGHSA-6425-cjxv-52gp\nGHSA-6q2x-6fhj-r3w8\nGHSA-9x6x-w4xq-rw3g\nGHSA-cq44-x9vf-fpqg\nGHSA-hj63-3ggp-wcj8\nGHSA-j9wg-77fw-f22f\nGHSA-m7q3-cwh2-ffg5\nGHSA-pqp3-gjgf-83cf"

data/fix-commits/imagemagick-b15feb65.json

@@ -2,6 +2,7 @@
   "vcs_url": "https://github.com/imagemagick/imagemagick",
   "vulnerabilities": {
     "GHSA-VXWM-JFJC-3R4X": {
+      "2ed1b96b9bc71434f0c4e82e3c63fec029c684c6": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x",
       "48c49d0cc2b72970b762e0d3263f6c35ab35a7b4": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x"
     },
     "GHSA-2FGX-26MG-J4F4": {

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,11 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "CVE-2026-90558": {
+      "002348c6db00b85dceed6062c87bf2c1b6a9ee6e": "sngrep: fix CVE-2026-90558\n\nFixes: NixOS/nixpkgs#562879\nStack Buffer Overflow via SIP Headers\n\n(cherry picked from commit 49546c7a32121b6830750d597ecc39ba5b45c34f)",
+      "ba3c3d84708563f82543c517b711876e34780222": "sngrep: fix CVE-2026-90558 (#562971)",
+      "49546c7a32121b6830750d597ecc39ba5b45c34f": "sngrep: fix CVE-2026-90558\n\nFixes: NixOS/nixpkgs#562879\nStack Buffer Overflow via SIP Headers"
+    },
     "CVE-2026-73295": {
       "d7553189a15e31104731f49869f4e6660e463499": "python3Packages.mkdocs-material: 9.7.6 -> 9.7.7\n\nThis release fixes CVE-2026-73295.\n\nhttps://redirect.github.com/squidfunk/mkdocs-material/releases/tag/9.7.7\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)\n(cherry picked from commit 915103b1a9877c89de7ab8665f4d7863591f560e)",
       "915103b1a9877c89de7ab8665f4d7863591f560e": "python3Packages.mkdocs-material: 9.7.6 -> 9.7.7\n\nThis release fixes CVE-2026-73295.\n\nhttps://redirect.github.com/squidfunk/mkdocs-material/releases/tag/9.7.7\n\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"