Skip to content

Commit 927dddc

Browse files
aboutcode-automationaboutcode-automation
committed
Sync Collecting Fix Commits: Tue May 19 08:29:52 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent d59a6a5 commit 927dddc

7 files changed

Lines changed: 148 additions & 6 deletions

‎data/fix-commits/advisory-database-b78f1d41.json‎

Lines changed: 56 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,62 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-2C5C-CHWR-9HQW": {
5+
"956515921f6dad9d3f69cacffec2e977574e92c7": "Improve GHSA-2c5c-chwr-9hqw",
6+
"179ed59c3b3f1ee9c683b81d9bdf78af8d195dff": "Publish Advisories\n\nGHSA-2c5c-chwr-9hqw\nGHSA-xxqh-mfjm-7mv9"
7+
},
8+
"GHSA-382C-R87V-M473": {
9+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
10+
},
11+
"GHSA-3HP3-3R3C-HW6C": {
12+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
13+
},
14+
"GHSA-447Q-FG75-99R5": {
15+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
16+
},
17+
"GHSA-5X4C-VWV3-GHP2": {
18+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
19+
},
20+
"GHSA-7F33-7337-2RHG": {
21+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
22+
},
23+
"GHSA-7GQ8-55GR-WPMV": {
24+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
25+
},
26+
"GHSA-9X57-PVWJ-P59F": {
27+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
28+
},
29+
"GHSA-FPP4-PF9W-P6RR": {
30+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
31+
},
32+
"GHSA-G7X6-Q2CP-CFQW": {
33+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
34+
},
35+
"GHSA-GHH2-Q8RR-Q487": {
36+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
37+
},
38+
"GHSA-MV6M-PVCQ-372P": {
39+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
40+
},
41+
"GHSA-V22H-74VW-3J73": {
42+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
43+
},
44+
"GHSA-VG48-6574-PX53": {
45+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
46+
},
47+
"GHSA-WM7G-8C9R-VG8P": {
48+
"7e996bdc1dbd6fbff4614639d9d78e45ebedb14f": "Publish Advisories\n\nGHSA-382c-r87v-m473\nGHSA-3hp3-3r3c-hw6c\nGHSA-447q-fg75-99r5\nGHSA-5x4c-vwv3-ghp2\nGHSA-7f33-7337-2rhg\nGHSA-7gq8-55gr-wpmv\nGHSA-9x57-pvwj-p59f\nGHSA-fpp4-pf9w-p6rr\nGHSA-g7x6-q2cp-cfqw\nGHSA-ghh2-q8rr-q487\nGHSA-mv6m-pvcq-372p\nGHSA-v22h-74vw-3j73\nGHSA-vg48-6574-px53\nGHSA-wm7g-8c9r-vg8p"
49+
},
50+
"GHSA-P3HW-MV63-RF9W": {
51+
"4d03a330fcc7b1ac92b38736bd8adb65dea9eae6": "Publish GHSA-p3hw-mv63-rf9w",
52+
"32854c519b9f642d5ab4f2d5399e7b0cd3940dd5": "Publish GHSA-p3hw-mv63-rf9w"
53+
},
54+
"GHSA-PJR6-WXMX-75CG": {
55+
"155f2b39d1a1b1dc76b56294b7e823aa2f7fb44b": "Publish Advisories\n\nGHSA-pjr6-wxmx-75cg\nGHSA-qrv4-g78c-hphg"
56+
},
57+
"GHSA-QRV4-G78C-HPHG": {
58+
"155f2b39d1a1b1dc76b56294b7e823aa2f7fb44b": "Publish Advisories\n\nGHSA-pjr6-wxmx-75cg\nGHSA-qrv4-g78c-hphg"
59+
},
460
"GHSA-2R69-QGV3-HR65": {
561
"375895c027d939d2313e88a9d6e44f51c1a160d9": "Publish Advisories\n\nGHSA-2r69-qgv3-hr65\nGHSA-3w8m-3w76-f6mh\nGHSA-4524-x6pc-rr9x\nGHSA-5624-2pmv-jx46\nGHSA-67gq-6q8c-qqh6\nGHSA-7vv4-j48f-wcx7\nGHSA-8jr4-6r33-phwm\nGHSA-9ccf-75hj-3v32\nGHSA-cjvq-x32c-xrmv\nGHSA-f2m9-wcf4-cwwx\nGHSA-f378-wf84-8j5h\nGHSA-hx5c-g9jj-chxv\nGHSA-p5qq-v9mc-39ff\nGHSA-qc73-55rc-fgph"
662
},
@@ -5713,9 +5769,6 @@
57135769
"GHSA-MJ4R-2HFC-F8P6": {
57145770
"14311fae776dd3bc27cfca0221d3ea34310ff452": "Publish Advisories\n\nGHSA-38f8-5428-x5cv\nGHSA-57rv-r2g8-2cj3\nGHSA-mj4r-2hfc-f8p6"
57155771
},
5716-
"GHSA-2C5C-CHWR-9HQW": {
5717-
"179ed59c3b3f1ee9c683b81d9bdf78af8d195dff": "Publish Advisories\n\nGHSA-2c5c-chwr-9hqw\nGHSA-xxqh-mfjm-7mv9"
5718-
},
57195772
"GHSA-XXQH-MFJM-7MV9": {
57205773
"179ed59c3b3f1ee9c683b81d9bdf78af8d195dff": "Publish Advisories\n\nGHSA-2c5c-chwr-9hqw\nGHSA-xxqh-mfjm-7mv9"
57215774
},
@@ -6710,9 +6763,6 @@
67106763
"GHSA-X494-MJ8G-CJ27": {
67116764
"a6933bdd1dcc2dbf9164d2a8962917f8c8a5c70c": "Publish Advisories\n\nGHSA-f26g-jm89-4g65\nGHSA-x494-mj8g-cj27"
67126765
},
6713-
"GHSA-P3HW-MV63-RF9W": {
6714-
"32854c519b9f642d5ab4f2d5399e7b0cd3940dd5": "Publish GHSA-p3hw-mv63-rf9w"
6715-
},
67166766
"GHSA-9857-6MW7-FQ2M": {
67176767
"bb79fe5a63eed5a820f77730c1cb5d333c00c1c8": "Publish Advisories\n\nGHSA-9857-6mw7-fq2m\nGHSA-mm5f-8q57-4fc4"
67186768
},

‎data/fix-commits/ffmpeg-3db150fe.json‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,15 @@
11
{
22
"vcs_url": "https://chromium.googlesource.com/chromium/third_party/ffmpeg",
33
"vulnerabilities": {
4+
"CVE-2026-30998": {
5+
"18b83f2d0a0f9bcbafb0001a2911327c4b8df056": "tools/zmqsend: close the input FILE\n\nFixes CVE-2026-30998\n\nFixes: Resource leak\nFound-by: Xinghang Lv\nSigned-off-by: James Almer <jamrial@gmail.com>"
6+
},
7+
"CVE-2026-30999": {
8+
"144af8f81abc1385631b4e1f4672cd415a9c6e05": "tools/zmqsend: free the AVBprint buffer after using it\n\nFixes CVE-2026-30999\n\nFixes: memleak\nFound-by: Xinghang Lv\nSigned-off-by: James Almer <jamrial@gmail.com>"
9+
},
10+
"CVE-2026-30997": {
11+
"1a2c16fe514b60e1860829c42ce199de77a007e5": "avcodec/av1dec: check that primary_ref_frame is within range\n\nFixes CVE-2026-30997\n\nFixes: Out-of-Bounds Access\nFound-by: Xinghang Lv\nSigned-off-by: James Almer <jamrial@gmail.com>"
12+
},
413
"CVE-2023-6602": {
514
"91d96dc8ddaebe0b6cb393f672085e6bfaf15a31": "avformat/hls: Be more picky on extensions\n\nThis blocks disallowed extensions from probing\nIt also requires all available segments to have matching extensions to the format\nmpegts is treated independent of the extension\n\nIt is recommended to set the whitelists correctly\ninstead of depending on extensions, but this should help a bit,\nand this is easier to backport\n\nFixes: CVE-2023-6602 II. HLS Force TTY Demuxer\nFixes: CVE-2023-6602 IV. HLS XBIN Demuxer DoS Amplification\n\nThe other parts of CVE-2023-6602 have been fixed by prior commits\n\nFound-by: Harvey Phillips of Amazon Element55 (element55)\nSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>",
615
"4c96d6bf75357ab13808efc9f08c1b41b1bf5bdf": "avformat/dashdec: Check whitelist\n\nFixes: CVE-2023-6602, V. DASH Playlist SSRF\n\nFound-by: Harvey Phillips of Amazon Element55 (element55)\nSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>"

‎data/fix-commits/imagemagick-b15feb65.json‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,21 @@
11
{
22
"vcs_url": "https://github.com/imagemagick/imagemagick",
33
"vulnerabilities": {
4+
"GHSA-H36C-3666-H489": {
5+
"9ee821731faee8c4cc44103cc4180854046bb13c": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489"
6+
},
7+
"GHSA-5V62-8FQ6-CP9M": {
8+
"3a12d63368e88350ed838966fcbb67625938cf3a": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m"
9+
},
10+
"GHSA-9HQG-XF93-GHFW": {
11+
"08b9f2747c0399948b67cf329c7091c5db069bcc": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9hqg-xf93-ghfw"
12+
},
13+
"GHSA-2HHQ-C99X-492R": {
14+
"017c7efe4d63b953b35ab96fc0939ba3620e4739": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2hhq-c99x-492r"
15+
},
16+
"GHSA-6MWJ-RP89-6J5J": {
17+
"404ff84e7dcf76b5e9ff2daffb6f8ff512cdd945": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6mwj-rp89-6j5j"
18+
},
419
"GHSA-VGH5-R42G-4J44": {
520
"8fa8b81f56d2caa4c5379da8f14aa2895e74fd1e": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vgh5-r42g-4j44"
621
},

‎data/fix-commits/imagemagick6-19533b67.json‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,15 @@
11
{
22
"vcs_url": "https://github.com/imagemagick/imagemagick6",
33
"vulnerabilities": {
4+
"GHSA-H36C-3666-H489": {
5+
"60153856299c66689e3620b8347c0cc32c807d95": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489"
6+
},
7+
"GHSA-5V62-8FQ6-CP9M": {
8+
"1a59a4f31acca06f90a1f83424ef991a60f76b61": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m"
9+
},
10+
"GHSA-6MWJ-RP89-6J5J": {
11+
"f1d37578fc0e0aca3d6b65d696f05ad7546c8dab": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6mwj-rp89-6j5j"
12+
},
413
"GHSA-VGH5-R42G-4J44": {
514
"5952b6a46788522a599579cdd8af35ade1c91b89": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vgh5-r42g-4j44"
615
},

0 commit comments

Comments
 (0)