Sync Collecting Fix Commits: Mon Aug 10 00:01:21 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,77 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-WMG3-H8MF-WGVR": {
+      "201b21325d4d77a2fab0e852891e29fbde37fee7": "Improve GHSA-wmg3-h8mf-wgvr"
+    },
+    "GHSA-848C-C2CX-J7QX": {
+      "fdbae2937fe6c285d8a7057680e7860ada10aa04": "Improve GHSA-848c-c2cx-j7qx",
+      "fb70ff2c257f1ca47c72f5b8b5d913d0de6cca53": "Publish Advisories\n\nGHSA-848c-c2cx-j7qx\nGHSA-8r5g-w376-c3rg\nGHSA-8wm8-3499-x4v9\nGHSA-f56p-33jj-44h8\nGHSA-fgcj-2p5v-hv7f\nGHSA-gg6g-q7xj-hhwf\nGHSA-gmmh-575h-g7v8\nGHSA-hgch-6f8j-3xgx\nGHSA-hw4h-9c69-9q35\nGHSA-jmfc-m78f-w5vj\nGHSA-vh9q-f797-xwg7\nGHSA-wj9f-vqw7-855c\nGHSA-wm9c-p6mf-fr7c\nGHSA-ww4c-c3rv-f96h"
+    },
+    "GHSA-G792-JHJ8-228V": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-25MJ-MFQW-XQM2": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-2G7M-7WMG-84J3": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-52C3-J5QJ-8HPP": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-FC48-5G6G-X546": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-M6MF-CRM7-82WQ": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-2CXW-QMFC-3VX3": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg",
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-5R3X-HRV2-FG58": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-5RG4-8H2H-X94W": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-6FH8-4V8J-R4GW": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-8G97-85G6-9WHW": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-HJ87-3G9G-3832": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-RMRP-J9QH-XWH9": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-XM38-Q6P9-JRGG": {
+      "488ad20c23e033c31c972e9d77f7b4f7b52f28d5": "Publish Advisories\n\nGHSA-g792-jhj8-228v\nGHSA-25mj-mfqw-xqm2\nGHSA-2g7m-7wmg-84j3\nGHSA-52c3-j5qj-8hpp\nGHSA-fc48-5g6g-x546\nGHSA-m6mf-crm7-82wq\nGHSA-2cxw-qmfc-3vx3\nGHSA-5r3x-hrv2-fg58\nGHSA-5rg4-8h2h-x94w\nGHSA-6fh8-4v8j-r4gw\nGHSA-8g97-85g6-9whw\nGHSA-hj87-3g9g-3832\nGHSA-rmrp-j9qh-xwh9\nGHSA-xm38-q6p9-jrgg"
+    },
+    "GHSA-4J4G-JHQH-8V4W": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-7Q92-F96Q-28WX": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-C8M9-RFPM-56Q6": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-FWRX-97HW-XG2R": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-G6P6-CJCX-6P6P": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-GV74-4W48-83FH": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
+    "GHSA-P9PF-MC7W-9Q4H": {
+      "fba932acdee5fbb1bc23853528bba846ca369785": "Publish Advisories\n\nGHSA-2cxw-qmfc-3vx3\nGHSA-4j4g-jhqh-8v4w\nGHSA-7q92-f96q-28wx\nGHSA-c8m9-rfpm-56q6\nGHSA-fwrx-97hw-xg2r\nGHSA-g6p6-cjcx-6p6p\nGHSA-gv74-4w48-83fh\nGHSA-p9pf-mc7w-9q4h"
+    },
     "GHSA-7553-W66V-FVHR": {
       "7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
     },
@@ -3206,9 +3277,6 @@
     "GHSA-PW7G-JH5J-6W4M": {
       "30b2e88d407156e5425e05ff25f0ec9537280e2f": "Publish Advisories\n\nGHSA-c964-568j-vxx7\nGHSA-pw7g-jh5j-6w4m"
     },
-    "GHSA-848C-C2CX-J7QX": {
-      "fb70ff2c257f1ca47c72f5b8b5d913d0de6cca53": "Publish Advisories\n\nGHSA-848c-c2cx-j7qx\nGHSA-8r5g-w376-c3rg\nGHSA-8wm8-3499-x4v9\nGHSA-f56p-33jj-44h8\nGHSA-fgcj-2p5v-hv7f\nGHSA-gg6g-q7xj-hhwf\nGHSA-gmmh-575h-g7v8\nGHSA-hgch-6f8j-3xgx\nGHSA-hw4h-9c69-9q35\nGHSA-jmfc-m78f-w5vj\nGHSA-vh9q-f797-xwg7\nGHSA-wj9f-vqw7-855c\nGHSA-wm9c-p6mf-fr7c\nGHSA-ww4c-c3rv-f96h"
-    },
     "GHSA-8R5G-W376-C3RG": {
       "fb70ff2c257f1ca47c72f5b8b5d913d0de6cca53": "Publish Advisories\n\nGHSA-848c-c2cx-j7qx\nGHSA-8r5g-w376-c3rg\nGHSA-8wm8-3499-x4v9\nGHSA-f56p-33jj-44h8\nGHSA-fgcj-2p5v-hv7f\nGHSA-gg6g-q7xj-hhwf\nGHSA-gmmh-575h-g7v8\nGHSA-hgch-6f8j-3xgx\nGHSA-hw4h-9c69-9q35\nGHSA-jmfc-m78f-w5vj\nGHSA-vh9q-f797-xwg7\nGHSA-wj9f-vqw7-855c\nGHSA-wm9c-p6mf-fr7c\nGHSA-ww4c-c3rv-f96h"
     },

data/fix-commits/nixpkgs-97436190.json

@@ -1,6 +1,40 @@
 {
   "vcs_url": "https://github.com/nixos/nixpkgs",
   "vulnerabilities": {
+    "GHSA-HMQG-CXWW-WQHQ": {
+      "dee2f938fc84c486e12a5753e42d2b29d7dfe3bc": "wordpressPackages: update plugins and languages\n\nCloses: https://github.com/NixOS/nixpkgs/issues/532248\nCloses: https://github.com/NixOS/nixpkgs/issues/527024\nCloses: https://github.com/NixOS/nixpkgs/issues/532252\nCloses: https://github.com/NixOS/nixpkgs/issues/500147\nFixes: GHSA-hmqg-cxww-wqhq\nFixes: GHSA-3pwp-g2mj-5p3v\nSee also: https://github.com/WordPress/gutenberg/pull/81279\n\n(cherry picked from commit 60574be3faac9306d8664e503cff608854b83630)",
+      "60574be3faac9306d8664e503cff608854b83630": "wordpressPackages: update plugins and languages\n\nCloses: https://github.com/NixOS/nixpkgs/issues/532248\nCloses: https://github.com/NixOS/nixpkgs/issues/527024\nCloses: https://github.com/NixOS/nixpkgs/issues/532252\nCloses: https://github.com/NixOS/nixpkgs/issues/500147\nFixes: GHSA-hmqg-cxww-wqhq\nFixes: GHSA-3pwp-g2mj-5p3v\nSee also: https://github.com/WordPress/gutenberg/pull/81279"
+    },
+    "GHSA-3PWP-G2MJ-5P3V": {
+      "dee2f938fc84c486e12a5753e42d2b29d7dfe3bc": "wordpressPackages: update plugins and languages\n\nCloses: https://github.com/NixOS/nixpkgs/issues/532248\nCloses: https://github.com/NixOS/nixpkgs/issues/527024\nCloses: https://github.com/NixOS/nixpkgs/issues/532252\nCloses: https://github.com/NixOS/nixpkgs/issues/500147\nFixes: GHSA-hmqg-cxww-wqhq\nFixes: GHSA-3pwp-g2mj-5p3v\nSee also: https://github.com/WordPress/gutenberg/pull/81279\n\n(cherry picked from commit 60574be3faac9306d8664e503cff608854b83630)",
+      "60574be3faac9306d8664e503cff608854b83630": "wordpressPackages: update plugins and languages\n\nCloses: https://github.com/NixOS/nixpkgs/issues/532248\nCloses: https://github.com/NixOS/nixpkgs/issues/527024\nCloses: https://github.com/NixOS/nixpkgs/issues/532252\nCloses: https://github.com/NixOS/nixpkgs/issues/500147\nFixes: GHSA-hmqg-cxww-wqhq\nFixes: GHSA-3pwp-g2mj-5p3v\nSee also: https://github.com/WordPress/gutenberg/pull/81279"
+    },
+    "CVE-2026-64638": {
+      "bb29696e83427e30bd676da9ae3d29b8701fa9bc": "wordpress_7_0: 7.0.2 -> 7.0.3\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/\n(cherry picked from commit 73ce0cf0113e19209aa6e33e3aa9c7383d85f563)",
+      "462ea1598e74d63f2404a8432a7545269148de28": "wordpress_6_9: 6.9.5 -> 6.9.6\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/\n(cherry picked from commit a4ad8440f66fee1eaa8c056992f0eecb64975101)",
+      "ddf5392b308aec0d91d10b97b06e1b2415f9c83d": "wordpress_6_8: 6.8.6 -> 6.8.7\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/\n(cherry picked from commit 72d3f61444118a9eae8861be3d413ba104b218e1)",
+      "73ce0cf0113e19209aa6e33e3aa9c7383d85f563": "wordpress_7_0: 7.0.2 -> 7.0.3\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/",
+      "a4ad8440f66fee1eaa8c056992f0eecb64975101": "wordpress_6_9: 6.9.5 -> 6.9.6\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/",
+      "72d3f61444118a9eae8861be3d413ba104b218e1": "wordpress_6_8: 6.8.6 -> 6.8.7\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/"
+    },
+    "GHSA-52P2-R8WF-JCRF": {
+      "bb29696e83427e30bd676da9ae3d29b8701fa9bc": "wordpress_7_0: 7.0.2 -> 7.0.3\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/\n(cherry picked from commit 73ce0cf0113e19209aa6e33e3aa9c7383d85f563)",
+      "462ea1598e74d63f2404a8432a7545269148de28": "wordpress_6_9: 6.9.5 -> 6.9.6\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/\n(cherry picked from commit a4ad8440f66fee1eaa8c056992f0eecb64975101)",
+      "ddf5392b308aec0d91d10b97b06e1b2415f9c83d": "wordpress_6_8: 6.8.6 -> 6.8.7\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/\n(cherry picked from commit 72d3f61444118a9eae8861be3d413ba104b218e1)",
+      "73ce0cf0113e19209aa6e33e3aa9c7383d85f563": "wordpress_7_0: 7.0.2 -> 7.0.3\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/",
+      "a4ad8440f66fee1eaa8c056992f0eecb64975101": "wordpress_6_9: 6.9.5 -> 6.9.6\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/",
+      "72d3f61444118a9eae8861be3d413ba104b218e1": "wordpress_6_8: 6.8.6 -> 6.8.7\n\nFixes (high-severity) security vulnerabilities, of which a priviledge escalation and a multitude of XSS vulnerabilities.\n\nFixes: GHSA-52p2-r8wf-jcrf\nFixes: CVE-2026-64638\nAnnouncement: https://wordpress.org/news/2026/08/wordpress-7-0-3-release/"
+    },
+    "GHSA-FX35-MQ7G-6G98": {
+      "b9639f0ad501b0d59a4a2d15b85245ec7c6d1a03": "cosign: 3.1.1 -> 3.1.3\n\nhttps://github.com/sigstore/cosign/releases/tag/v3.1.3\nhttps://github.com/sigstore/cosign/releases/tag/v3.1.2\n\nFixes https://github.com/sigstore/cosign/security/advisories/GHSA-fx35-mq7g-6g98\n\n(cherry picked from commit 15738eeffdb9859a4b277c1309b3be54449c4bf6)",
+      "15738eeffdb9859a4b277c1309b3be54449c4bf6": "cosign: 3.1.1 -> 3.1.3\n\nhttps://github.com/sigstore/cosign/releases/tag/v3.1.3\nhttps://github.com/sigstore/cosign/releases/tag/v3.1.2\n\nFixes https://github.com/sigstore/cosign/security/advisories/GHSA-fx35-mq7g-6g98"
+    },
+    "CVE-2026-47736": {
+      "eca5b84a97d4c5230650fcd369d524c94747f0c3": "rubyPackages.puma: 7.1.0 -> 7.2.1\n\nhttps://redirect.github.com/puma/puma/releases/tag/v7.2.1\n\nFixes CVE-2026-47736 and CVE-2026-47737.\n\nNot-cherry-picked-because: release-26.05 stays on Puma 7 due to Puma 8 breaking changes\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
+    },
+    "CVE-2026-47737": {
+      "eca5b84a97d4c5230650fcd369d524c94747f0c3": "rubyPackages.puma: 7.1.0 -> 7.2.1\n\nhttps://redirect.github.com/puma/puma/releases/tag/v7.2.1\n\nFixes CVE-2026-47736 and CVE-2026-47737.\n\nNot-cherry-picked-because: release-26.05 stays on Puma 7 due to Puma 8 breaking changes\nAssisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)"
+    },
     "CVE-2026-9737": {
       "44914b109ac014b0e0594ed2052fbdfcb68efecf": "mongodb-7_0: 7.0.37 -> 7.0.39\n\nhttps://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#7.0.39-changelog\n\nFixes: CVE-2026-9737\nFixes: CVE-2026-13055\nFixes: CVE-2026-13059\nFixes: CVE-2026-13060\nFixes: CVE-2026-13061\nFixes: CVE-2026-13062\nFixes: CVE-2026-13065\nFixes: CVE-2026-13066\nFixes: CVE-2026-13068\nFixes: CVE-2026-13069\nFixes: CVE-2026-13070\nFixes: CVE-2026-13071\nFixes: CVE-2026-13072\nFixes: CVE-2026-13074\nFixes: CVE-2026-13077\nFixes: CVE-2026-13078\n(cherry picked from commit aeda64b2ec870ea97ebafbaf4fe2c195204d631a)",
       "aeda64b2ec870ea97ebafbaf4fe2c195204d631a": "mongodb-7_0: 7.0.37 -> 7.0.39\n\nhttps://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#7.0.39-changelog\n\nFixes: CVE-2026-9737\nFixes: CVE-2026-13055\nFixes: CVE-2026-13059\nFixes: CVE-2026-13060\nFixes: CVE-2026-13061\nFixes: CVE-2026-13062\nFixes: CVE-2026-13065\nFixes: CVE-2026-13066\nFixes: CVE-2026-13068\nFixes: CVE-2026-13069\nFixes: CVE-2026-13070\nFixes: CVE-2026-13071\nFixes: CVE-2026-13072\nFixes: CVE-2026-13074\nFixes: CVE-2026-13077\nFixes: CVE-2026-13078"