Sync Collecting Fix Commits: Fri Sep 4 07:56:30 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,128 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-V56Q-MH7H-F735": {
+      "3bc04d6a72fb904b8546c6511815701659c0639a": "Improve GHSA-v56q-mh7h-f735",
+      "5d839983321c436942f1ec3bc0609a9d038418a3": "Improve GHSA-v56q-mh7h-f735",
+      "0e291808cb617ccf4c842a91d82530cb507f8570": "Publish GHSA-v56q-mh7h-f735"
+    },
+    "GHSA-49PQ-RGJ7-Q6MH": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-5W5P-M5FW-5C8V": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-66Q3-JGVH-847R": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-763H-54F2-RFVW": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-FCPF-2C9P-9W89": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-FQ5X-C72W-P2CQ": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-G7X4-45C8-WPX3": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-GMH4-CMC7-776H": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-H6VX-22PM-PJ9V": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-HJM2-6CX2-F549": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-J5C5-5R34-44PM": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-MF2R-H4RV-564G": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-MQPG-G4XH-H9JM": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-MVJ6-G22Q-4PR3": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-P98F-83CX-FHFF": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-V9R8-P5Q7-MGMQ": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-VJQR-P6RH-8PWG": {
+      "5348e366e977301a559a6e4b02cbb9c3399dc8af": "Publish Advisories\n\nGHSA-49pq-rgj7-q6mh\nGHSA-5w5p-m5fw-5c8v\nGHSA-66q3-jgvh-847r\nGHSA-763h-54f2-rfvw\nGHSA-fcpf-2c9p-9w89\nGHSA-fq5x-c72w-p2cq\nGHSA-g7x4-45c8-wpx3\nGHSA-gmh4-cmc7-776h\nGHSA-h6vx-22pm-pj9v\nGHSA-hjm2-6cx2-f549\nGHSA-j5c5-5r34-44pm\nGHSA-mf2r-h4rv-564g\nGHSA-mqpg-g4xh-h9jm\nGHSA-mvj6-g22q-4pr3\nGHSA-p98f-83cx-fhff\nGHSA-v9r8-p5q7-mgmq\nGHSA-vjqr-p6rh-8pwg"
+    },
+    "GHSA-2Q8M-2XCF-6RRJ": {
+      "4b2e5b9277b1f36a5f3f3cf89141d90e640149c1": "Publish Advisories\n\nGHSA-2q8m-2xcf-6rrj\nGHSA-m37p-hmh2-w6j2\nGHSA-xj79-6hh5-9w6q",
+      "cc723b0e9b9159b65b6b926ce629fb2d1bfb4a86": "Publish Advisories\n\nGHSA-2q8m-2xcf-6rrj\nGHSA-7h9w-3c75-wmx8"
+    },
+    "GHSA-M37P-HMH2-W6J2": {
+      "4b2e5b9277b1f36a5f3f3cf89141d90e640149c1": "Publish Advisories\n\nGHSA-2q8m-2xcf-6rrj\nGHSA-m37p-hmh2-w6j2\nGHSA-xj79-6hh5-9w6q",
+      "9f66539936adaf489c42537802d96612286ad34e": "Publish GHSA-m37p-hmh2-w6j2"
+    },
+    "GHSA-XJ79-6HH5-9W6Q": {
+      "4b2e5b9277b1f36a5f3f3cf89141d90e640149c1": "Publish Advisories\n\nGHSA-2q8m-2xcf-6rrj\nGHSA-m37p-hmh2-w6j2\nGHSA-xj79-6hh5-9w6q",
+      "f8cfa54a7c8bdaa1c363fd39b4bb2de773eb6a52": "Publish Advisories\n\nGHSA-jqqw-37x4-9rwj\nGHSA-4x46-h598-64qr\nGHSA-8xmh-8wfg-9f6j\nGHSA-h88q-m8mm-7243\nGHSA-hmpf-72wc-2r6x\nGHSA-m7rp-473c-296x\nGHSA-q3jf-4x8j-368q\nGHSA-vwg8-37h9-g38g\nGHSA-x82v-328r-gf3h\nGHSA-xq96-f7x8-gfx3\nGHSA-hrq7-vgh7-p534\nGHSA-4f5j-wqjr-hx49\nGHSA-v7fx-gjvh-347c\nGHSA-xj79-6hh5-9w6q\nGHSA-2mjp-rg6q-cc58\nGHSA-2r56-6h49-5c5r\nGHSA-3x5r-hcq6-ggfv\nGHSA-44cw-v76j-7fvv\nGHSA-pg5x-hjq6-v5p3\nGHSA-q77m-569p-rj42\nGHSA-wf7j-r93f-5cvm"
+    },
+    "GHSA-FXMW-RV85-5HWH": {
+      "979be19663af7c21cbb8ecd91c33bfe0d89c5797": "Publish Advisories\n\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5\nGHSA-5fhr-f75j-8wr9\nGHSA-8x84-r2ff-h8pq\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5"
+    },
+    "GHSA-HR3F-QFRH-H7W5": {
+      "979be19663af7c21cbb8ecd91c33bfe0d89c5797": "Publish Advisories\n\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5\nGHSA-5fhr-f75j-8wr9\nGHSA-8x84-r2ff-h8pq\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5"
+    },
+    "GHSA-5FHR-F75J-8WR9": {
+      "979be19663af7c21cbb8ecd91c33bfe0d89c5797": "Publish Advisories\n\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5\nGHSA-5fhr-f75j-8wr9\nGHSA-8x84-r2ff-h8pq\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5"
+    },
+    "GHSA-8X84-R2FF-H8PQ": {
+      "979be19663af7c21cbb8ecd91c33bfe0d89c5797": "Publish Advisories\n\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5\nGHSA-5fhr-f75j-8wr9\nGHSA-8x84-r2ff-h8pq\nGHSA-fxmw-rv85-5hwh\nGHSA-hr3f-qfrh-h7w5"
+    },
+    "GHSA-72XP-24P9-7VPF": {
+      "cb1f6e0dc1a85c94927c805eead1fd7e96576154": "Publish Advisories\n\nGHSA-72xp-24p9-7vpf\nGHSA-jv8v-xq2h-657v\nGHSA-qvq9-hq6p-v378\nGHSA-72xp-24p9-7vpf"
+    },
+    "GHSA-JV8V-XQ2H-657V": {
+      "cb1f6e0dc1a85c94927c805eead1fd7e96576154": "Publish Advisories\n\nGHSA-72xp-24p9-7vpf\nGHSA-jv8v-xq2h-657v\nGHSA-qvq9-hq6p-v378\nGHSA-72xp-24p9-7vpf"
+    },
+    "GHSA-QVQ9-HQ6P-V378": {
+      "cb1f6e0dc1a85c94927c805eead1fd7e96576154": "Publish Advisories\n\nGHSA-72xp-24p9-7vpf\nGHSA-jv8v-xq2h-657v\nGHSA-qvq9-hq6p-v378\nGHSA-72xp-24p9-7vpf"
+    },
+    "GHSA-H4W7-MGQ4-WG6X": {
+      "df2869fd0f1068019bdc29653d15a2b073ec2bae": "Publish Advisories\n\nGHSA-h4w7-mgq4-wg6x\nGHSA-h4w7-mgq4-wg6x"
+    },
+    "GHSA-89HF-XCX5-R9R6": {
+      "e1c2b3e8b3703173c83ecf776608803ae36d5c67": "Publish Advisories\n\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx\nGHSA-67x2-mq63-v9vm\nGHSA-vpjw-wf5h-cgpq\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx"
+    },
+    "GHSA-V598-7627-G9FX": {
+      "e1c2b3e8b3703173c83ecf776608803ae36d5c67": "Publish Advisories\n\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx\nGHSA-67x2-mq63-v9vm\nGHSA-vpjw-wf5h-cgpq\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx"
+    },
+    "GHSA-67X2-MQ63-V9VM": {
+      "e1c2b3e8b3703173c83ecf776608803ae36d5c67": "Publish Advisories\n\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx\nGHSA-67x2-mq63-v9vm\nGHSA-vpjw-wf5h-cgpq\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx"
+    },
+    "GHSA-VPJW-WF5H-CGPQ": {
+      "e1c2b3e8b3703173c83ecf776608803ae36d5c67": "Publish Advisories\n\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx\nGHSA-67x2-mq63-v9vm\nGHSA-vpjw-wf5h-cgpq\nGHSA-89hf-xcx5-r9r6\nGHSA-v598-7627-g9fx"
+    },
+    "GHSA-2JMX-Q9JF-WP3W": {
+      "6fdf7b0cb9ee4feae7fb87dd83e49d12b6f482c1": "Publish Advisories\n\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c\nGHSA-6mcf-g667-w3qv\nGHSA-v7ph-r5r6-4jcj\nGHSA-x67c-8pwr-m8g3\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c"
+    },
+    "GHSA-J26H-R8JX-887C": {
+      "6fdf7b0cb9ee4feae7fb87dd83e49d12b6f482c1": "Publish Advisories\n\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c\nGHSA-6mcf-g667-w3qv\nGHSA-v7ph-r5r6-4jcj\nGHSA-x67c-8pwr-m8g3\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c"
+    },
+    "GHSA-6MCF-G667-W3QV": {
+      "6fdf7b0cb9ee4feae7fb87dd83e49d12b6f482c1": "Publish Advisories\n\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c\nGHSA-6mcf-g667-w3qv\nGHSA-v7ph-r5r6-4jcj\nGHSA-x67c-8pwr-m8g3\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c"
+    },
+    "GHSA-V7PH-R5R6-4JCJ": {
+      "6fdf7b0cb9ee4feae7fb87dd83e49d12b6f482c1": "Publish Advisories\n\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c\nGHSA-6mcf-g667-w3qv\nGHSA-v7ph-r5r6-4jcj\nGHSA-x67c-8pwr-m8g3\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c"
+    },
+    "GHSA-X67C-8PWR-M8G3": {
+      "6fdf7b0cb9ee4feae7fb87dd83e49d12b6f482c1": "Publish Advisories\n\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c\nGHSA-6mcf-g667-w3qv\nGHSA-v7ph-r5r6-4jcj\nGHSA-x67c-8pwr-m8g3\nGHSA-2jmx-q9jf-wp3w\nGHSA-j26h-r8jx-887c"
+    },
+    "GHSA-MHCC-G592-267J": {
+      "1486c2918433af913c092a29da5e1e614d8d0fd8": "Publish Advisories\n\nGHSA-mhcc-g592-267j\nGHSA-mhcc-g592-267j"
+    },
     "GHSA-8WX9-J7J5-H9VP": {
       "47b83eaf6906315a555c413eaf4d7ae3e3065c2a": "Publish Advisories\n\nGHSA-8wx9-j7j5-h9vp\nGHSA-3mp7-4rh5-jrv9\nGHSA-8wx9-j7j5-h9vp"
     },
@@ -1230,9 +1352,6 @@
     "GHSA-V7FX-GJVH-347C": {
       "f8cfa54a7c8bdaa1c363fd39b4bb2de773eb6a52": "Publish Advisories\n\nGHSA-jqqw-37x4-9rwj\nGHSA-4x46-h598-64qr\nGHSA-8xmh-8wfg-9f6j\nGHSA-h88q-m8mm-7243\nGHSA-hmpf-72wc-2r6x\nGHSA-m7rp-473c-296x\nGHSA-q3jf-4x8j-368q\nGHSA-vwg8-37h9-g38g\nGHSA-x82v-328r-gf3h\nGHSA-xq96-f7x8-gfx3\nGHSA-hrq7-vgh7-p534\nGHSA-4f5j-wqjr-hx49\nGHSA-v7fx-gjvh-347c\nGHSA-xj79-6hh5-9w6q\nGHSA-2mjp-rg6q-cc58\nGHSA-2r56-6h49-5c5r\nGHSA-3x5r-hcq6-ggfv\nGHSA-44cw-v76j-7fvv\nGHSA-pg5x-hjq6-v5p3\nGHSA-q77m-569p-rj42\nGHSA-wf7j-r93f-5cvm"
     },
-    "GHSA-XJ79-6HH5-9W6Q": {
-      "f8cfa54a7c8bdaa1c363fd39b4bb2de773eb6a52": "Publish Advisories\n\nGHSA-jqqw-37x4-9rwj\nGHSA-4x46-h598-64qr\nGHSA-8xmh-8wfg-9f6j\nGHSA-h88q-m8mm-7243\nGHSA-hmpf-72wc-2r6x\nGHSA-m7rp-473c-296x\nGHSA-q3jf-4x8j-368q\nGHSA-vwg8-37h9-g38g\nGHSA-x82v-328r-gf3h\nGHSA-xq96-f7x8-gfx3\nGHSA-hrq7-vgh7-p534\nGHSA-4f5j-wqjr-hx49\nGHSA-v7fx-gjvh-347c\nGHSA-xj79-6hh5-9w6q\nGHSA-2mjp-rg6q-cc58\nGHSA-2r56-6h49-5c5r\nGHSA-3x5r-hcq6-ggfv\nGHSA-44cw-v76j-7fvv\nGHSA-pg5x-hjq6-v5p3\nGHSA-q77m-569p-rj42\nGHSA-wf7j-r93f-5cvm"
-    },
     "GHSA-2MJP-RG6Q-CC58": {
       "f8cfa54a7c8bdaa1c363fd39b4bb2de773eb6a52": "Publish Advisories\n\nGHSA-jqqw-37x4-9rwj\nGHSA-4x46-h598-64qr\nGHSA-8xmh-8wfg-9f6j\nGHSA-h88q-m8mm-7243\nGHSA-hmpf-72wc-2r6x\nGHSA-m7rp-473c-296x\nGHSA-q3jf-4x8j-368q\nGHSA-vwg8-37h9-g38g\nGHSA-x82v-328r-gf3h\nGHSA-xq96-f7x8-gfx3\nGHSA-hrq7-vgh7-p534\nGHSA-4f5j-wqjr-hx49\nGHSA-v7fx-gjvh-347c\nGHSA-xj79-6hh5-9w6q\nGHSA-2mjp-rg6q-cc58\nGHSA-2r56-6h49-5c5r\nGHSA-3x5r-hcq6-ggfv\nGHSA-44cw-v76j-7fvv\nGHSA-pg5x-hjq6-v5p3\nGHSA-q77m-569p-rj42\nGHSA-wf7j-r93f-5cvm"
     },
@@ -4980,10 +5099,6 @@
     "GHSA-4J2P-28Q2-5M79": {
       "8e3def62b7806b45e4846eabeabe2cd6b4539f1e": "Improve GHSA-4j2p-28q2-5m79"
     },
-    "GHSA-V56Q-MH7H-F735": {
-      "5d839983321c436942f1ec3bc0609a9d038418a3": "Improve GHSA-v56q-mh7h-f735",
-      "0e291808cb617ccf4c842a91d82530cb507f8570": "Publish GHSA-v56q-mh7h-f735"
-    },
     "GHSA-76PC-MQXP-3RQ5": {
       "60120342312df18a3540b7670ba6bc61ee5fbf88": "Publish Advisories\n\nGHSA-76pc-mqxp-3rq5\nGHSA-9q54-f358-3fqf"
     },
@@ -94108,9 +94223,6 @@
     "GHSA-CGVV-3455-824J": {
       "6809c156da901546e284bcd245517205ed7e7f1f": "Publish GHSA-cgvv-3455-824j"
     },
-    "GHSA-2Q8M-2XCF-6RRJ": {
-      "cc723b0e9b9159b65b6b926ce629fb2d1bfb4a86": "Publish Advisories\n\nGHSA-2q8m-2xcf-6rrj\nGHSA-7h9w-3c75-wmx8"
-    },
     "GHSA-7H9W-3C75-WMX8": {
       "cc723b0e9b9159b65b6b926ce629fb2d1bfb4a86": "Publish Advisories\n\nGHSA-2q8m-2xcf-6rrj\nGHSA-7h9w-3c75-wmx8"
     },

data/fix-commits/brave-core-1785c96b.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://github.com/brave/brave-core",
   "vulnerabilities": {
+    "GHSA-V5MP-JGW5-2X6J": {
+      "515e65b0ee395ea149cec4658e58df7cb8dee6ac": "fix: override toml to 4.1.2 for GHSA-v5mp-jgw5-2x6j"
+    },
     "GHSA-FXQJ-RQCC-2CMP": {
       "4169a5311e94c0aab58137aeac6c659dd8721eda": "Fix audit findings for postcss, fast-uri, ip-address and undici (uplift to 1.93.x) (#38770)\n\nResolve the non-DoS audit findings reported against v1.95.36.\n\nThis branch predates the npm -> pnpm migration, so the equivalent changes are\nmade in package.json \"overrides\" and package-lock.json rather than in\npnpm-workspace.yaml and pnpm-lock.yaml.\n\nbrave-core (npm):\n- postcss: bump the existing security override 8.5.18 -> 8.5.23 for the\n  arbitrary .map file read (GHSA-fxqj-rqcc-2cmp). The override had to be\n  bumped because it pins an exact version.\n- fast-uri: 3.1.2 -> 3.1.5 (host confusion via backslash authority\n  introducer). Also clears the previously ignored GHSA-v2hh-gcrm-f6hx and\n  GHSA-4c8g-83qw-93j6.\n- ip-address: 10.2.0 -> 10.4.0 (leading-zero octet, CIDR suffix and\n  IPv4-mapped/NAT64 misclassification SSRF bypasses).\n\nfast-uri and ip-address are satisfied by the ranges ajv and socks already\ndeclare, so they are resolved in the lockfile without new overrides.\n\nweb-discovery-project:\n- Roll to 9eaf91916b25, which brings undici 7.29.0 (response\n  desynchronization, private-cache information disclosure, CRLF injection\n  and cookie attribute injection) and socket.io-parser 4.2.7. The roll also\n  picks up \"Prevent redirects on doublefetch\" (brave/web-discovery-project#478),\n  which is a behavior change rather than a dependency bump.\n\nGHSA-rgw5-rvv9-x895 (brace-expansion) is left as is: it is a DoS, and\nbrace-expansion is still vulnerable in brave-core's own tree, so its\nbrave/audit-config ignore entry is still required.\n\nUplift of https://github.com/brave/brave-core/pull/38748 to 1.93.x",
       "4a284580311833972c4253fd3652f876894e0254": "Fix pnpm audit findings for postcss, fast-uri, ip-address and undici (uplift to 1.94.x) (#38769)\n\nResolve the non-DoS audit findings reported against v1.95.36.\n\nbrave-core (pnpm):\n- postcss: bump the existing security override 8.5.18 -> 8.5.23 for the\n  arbitrary .map file read (GHSA-fxqj-rqcc-2cmp). The override had to be\n  bumped because it pins an exact version.\n- fast-uri: 3.1.2 -> 3.1.5 (host confusion via backslash authority\n  introducer). Also clears the previously ignored GHSA-v2hh-gcrm-f6hx and\n  GHSA-4c8g-83qw-93j6.\n- ip-address: 10.2.0 -> 10.4.0 (leading-zero octet, CIDR suffix and\n  IPv4-mapped/NAT64 misclassification SSRF bypasses).\n\nfast-uri and ip-address are satisfied by the ranges ajv and socks already\ndeclare, so they are resolved in the lockfile without new overrides.\n\nweb-discovery-project:\n- Roll to 9eaf91916b25, which brings undici 7.29.0 (response\n  desynchronization, private-cache information disclosure, CRLF injection\n  and cookie attribute injection) and socket.io-parser 4.2.7. The roll also\n  picks up \"Prevent redirects on doublefetch\" (brave/web-discovery-project#478),\n  which is a behavior change rather than a dependency bump.\n\nGHSA-rgw5-rvv9-x895 (brace-expansion) is left as is: it is a DoS, and\nbrace-expansion is still vulnerable in brave-core's own tree, so its\nbrave/audit-config ignore entry is still required.\n\nUplift of https://github.com/brave/brave-core/pull/38748 to 1.94.x",