Sync Collecting Fix Commits: Tue Aug 25 00:40:46 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,100 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-M2W9-H2MM-79QR": {
+      "98b6eea7ae6fa173f3b94507fe0b4ac8cf6f552d": "Publish Advisories\n\nGHSA-m2w9-h2mm-79qr\nGHSA-m2w9-h2mm-79qr"
+    },
+    "GHSA-3VMP-WHVV-5V9V": {
+      "896a2f99b9a7ce7216f697d77af4789e865775cb": "Publish Advisories\n\nGHSA-3vmp-whvv-5v9v\nGHSA-3vmp-whvv-5v9v"
+    },
+    "GHSA-C28Q-M4GF-VG4Q": {
+      "e721fea01d956357b3ce29ba500deb41f82d02b4": "Publish Advisories\n\nGHSA-c28q-m4gf-vg4q\nGHSA-c28q-m4gf-vg4q"
+    },
+    "GHSA-RP4V-QC77-PHM4": {
+      "86f45142fca396f7a6ec36b193ee12cdefc25f96": "Publish Advisories\n\nGHSA-rp4v-qc77-phm4\nGHSA-rp4v-qc77-phm4"
+    },
+    "GHSA-P68J-Q8J9-JWF5": {
+      "2bc581c0d38a46aa30575dfe8c80176a46fc0584": "Publish Advisories\n\nGHSA-p68j-q8j9-jwf5\nGHSA-275c-xpvc-jgfw\nGHSA-jm48-m3rr-9hgg\nGHSA-p68j-q8j9-jwf5"
+    },
+    "GHSA-275C-XPVC-JGFW": {
+      "2bc581c0d38a46aa30575dfe8c80176a46fc0584": "Publish Advisories\n\nGHSA-p68j-q8j9-jwf5\nGHSA-275c-xpvc-jgfw\nGHSA-jm48-m3rr-9hgg\nGHSA-p68j-q8j9-jwf5",
+      "c8e3d01f13cfda055f96c87557f0f4f5e045a6b1": "Publish Advisories\n\nGHSA-275c-xpvc-jgfw\nGHSA-3c6j-hq33-3jv4\nGHSA-4m3v-q747-pc6h\nGHSA-7hxm-f538-3xp6\nGHSA-rj6p-xmxr-qj4h\nGHSA-vxx3-6hc9-7cc3"
+    },
+    "GHSA-JM48-M3RR-9HGG": {
+      "2bc581c0d38a46aa30575dfe8c80176a46fc0584": "Publish Advisories\n\nGHSA-p68j-q8j9-jwf5\nGHSA-275c-xpvc-jgfw\nGHSA-jm48-m3rr-9hgg\nGHSA-p68j-q8j9-jwf5"
+    },
+    "GHSA-W67G-5RQW-F597": {
+      "ae18e79ee2fd225857e862ffbe177883abfade5e": "Publish GHSA-w67g-5rqw-f597"
+    },
+    "GHSA-4PH6-MJV7-3FQ6": {
+      "9f282d72ec6eaf400bf8043c5994ed2c1752a2ba": "Publish GHSA-4ph6-mjv7-3fq6"
+    },
+    "GHSA-9XQ9-36W5-Q796": {
+      "3d5d7d441fb990d9ff6ec98c1ba5c6d25dd5271f": "Improve GHSA-9xq9-36w5-q796",
+      "e02f0b1d19fd76b41d6baee13da9c2d2094bba76": "Publish Advisories\n\nGHSA-4hm9-844j-jmxp\nGHSA-wgjv-9j3q-jhg8\nGHSA-g857-hhfv-j68w\nGHSA-3363-2ph6-35wh\nGHSA-73jc-5mrq-prw7\nGHSA-799f-29jm-gr6c\nGHSA-9xq9-36w5-q796\nGHSA-h9cc-w26m-j342\nGHSA-jrrg-99xh-5j2q\nGHSA-m549-qq94-fvhg\nGHSA-mw3q-r9wh-h2ff\nGHSA-vghx-352f-93jm\nGHSA-wmhf-fqc8-vxhh\nGHSA-5g86-85rp-f9hx\nGHSA-8qhj-4f8c-j8qg\nGHSA-cj8g-prcm-mfg5\nGHSA-mqq6-462x-jxmm\nGHSA-vrmh-5mmx-hjwx",
+      "e4d0ff855ce7ff5837da1c14ad4b547784f09c1c": "Publish GHSA-9xq9-36w5-q796",
+      "7d8049e51ad706d7016304e96169eb910460918a": "Publish GHSA-9xq9-36w5-q796"
+    },
+    "GHSA-8JJ7-4V57-FRF5": {
+      "094a1606bc92ac7d9b9d5fba225b211ec3a52839": "Publish Advisories\n\nGHSA-8jj7-4v57-frf5\nGHSA-fwjf-m4qw-9f2x"
+    },
+    "GHSA-FWJF-M4QW-9F2X": {
+      "094a1606bc92ac7d9b9d5fba225b211ec3a52839": "Publish Advisories\n\nGHSA-8jj7-4v57-frf5\nGHSA-fwjf-m4qw-9f2x"
+    },
+    "GHSA-XM8C-HVJF-C5Q9": {
+      "3ea09c7ae85101f1a6f28db22731d5444e18b17e": "Improve GHSA-xm8c-hvjf-c5q9"
+    },
+    "GHSA-36P7-VC44-83PF": {
+      "da42caf96d5b00a143024218edfbeb86d751568e": "Publish GHSA-36p7-vc44-83pf"
+    },
+    "GHSA-XPH7-9RJV-W5FR": {
+      "df8b78ab164d3e988b77bf40c29e10e92340c154": "Publish GHSA-xph7-9rjv-w5fr"
+    },
+    "GHSA-2WM9-HF6C-P5CR": {
+      "fac31c7a2b0b1c10ff7669926362750a354ed6a4": "Publish GHSA-2wm9-hf6c-p5cr"
+    },
+    "GHSA-68J8-PQ59-FQGM": {
+      "ade92f5f24ae32f071be2bce25c2cb3b480a3c62": "Improve GHSA-68j8-pq59-fqgm",
+      "3e1fb4969f43956da277730db223a306b105d189": "Publish Advisories\n\nGHSA-43gx-6gv6-3jcp\nGHSA-68j8-pq59-fqgm\nGHSA-h8wq-7xc4-p3qx\nGHSA-hqmj-h5c6-369m\nGHSA-mgx6-5cf9-rr43",
+      "439b64354fe2e4289e1e7aaeb7a93e69f8629a24": "Publish Advisories\n\nGHSA-68j8-pq59-fqgm\nGHSA-4j28-22qp-rjcf\nGHSA-vc5j-42hh-j3mr\nGHSA-3r34-vq8m-39gh"
+    },
+    "GHSA-3GJW-F78C-VVPW": {
+      "09ce2b1ffe5bbf4e68937be7e64bfde0a1c22618": "Publish Advisories\n\nGHSA-3gjw-f78c-vvpw\nGHSA-rgqc-3x5p-6gwg"
+    },
+    "GHSA-RGQC-3X5P-6GWG": {
+      "09ce2b1ffe5bbf4e68937be7e64bfde0a1c22618": "Publish Advisories\n\nGHSA-3gjw-f78c-vvpw\nGHSA-rgqc-3x5p-6gwg"
+    },
+    "GHSA-5X78-73V4-XG6W": {
+      "f080b6004bb7cb8d6ec8e001f2646e1a0302e237": "Publish GHSA-5x78-73v4-xg6w"
+    },
+    "GHSA-9284-FJC3-FMMJ": {
+      "44c68c7b863742cd0560d5b61c97ce9937838e3a": "Publish GHSA-9284-fjc3-fmmj"
+    },
+    "GHSA-W2X5-GV52-9CCV": {
+      "2a132dcd9fd74cd4564ca51ecf0c3d37f5d79082": "Publish GHSA-w2x5-gv52-9ccv"
+    },
+    "GHSA-XM98-3VCF-FPH7": {
+      "cd18821eefe1e9aaf80a4314d4bbd894228e99c4": "Publish GHSA-xm98-3vcf-fph7"
+    },
+    "GHSA-8988-4F7V-96QF": {
+      "83d52d4bb7d4a9e3633e9cbec85ac57059064a36": "Publish GHSA-8988-4f7v-96qf",
+      "ff785a01b16ab5455fb7e1369e9efc66426283f7": "Merge pull request #8474 from github/Lokeninfinitypoint-GHSA-8988-4f7v-96qf",
+      "b2eedf586f7a382fecf533870567d65b9b85586a": "Improve GHSA-8988-4f7v-96qf",
+      "a0b2d8824919e067afbb32c9362255e0f422998f": "Publish Advisories\n\nGHSA-6v32-fjc9-9qf6\nGHSA-8988-4f7v-96qf\nGHSA-jp82-jpqv-5vv3\nGHSA-pw6j-qg29-8w7f"
+    },
+    "GHSA-698X-9W2P-7VVP": {
+      "73bcfe7d5bd9975b70e5257fcf81a3f82de61945": "Improve GHSA-698x-9w2p-7vvp",
+      "8d7b8d951324919296a2682031bfcb852dfdec69": "Publish Advisories\n\nGHSA-2883-wwh7-x57v\nGHSA-698x-9w2p-7vvp\nGHSA-6hcw-qqr8-pjj8\nGHSA-85rw-g4f4-jprr\nGHSA-r6vm-4xwg-w69h\nGHSA-vmfc-9982-2m45\nGHSA-85rw-g4f4-jprr"
+    },
+    "GHSA-X744-4WPC-V9H2": {
+      "7af0ac44ecb45bb6aa2d97ab95327e34029e2c82": "Publish GHSA-x744-4wpc-v9h2",
+      "277e10df589523c9b86d89ac3636f7cf68bc0f27": "Merge pull request #8830 from github/praneethd51-GHSA-x744-4wpc-v9h2",
+      "b5842c4d2a6f6cb5ed9f7ac7ca6b9460a18e2032": "Improve GHSA-x744-4wpc-v9h2",
+      "07a7f5b8c2f8fd4a599624c04e62283436b45a57": "Publish Advisories\n\nGHSA-5wfc-hjrc-gq87\nGHSA-x744-4wpc-v9h2\nGHSA-37w4-hwhx-4rc4",
+      "eee5dc2cf945fa7cf671b0d4188876d2f50a0ef8": "Publish GHSA-x744-4wpc-v9h2",
+      "3eaa1ef4b7fbd72ecd2faf01f9211e79f2a3f6af": "Publish Advisories\n\nGHSA-c4r5-fxqw-vh93\nGHSA-m959-cc7f-wv43\nGHSA-qh6h-p6c9-ff54\nGHSA-qj8w-gfj5-8c6v\nGHSA-x34h-54cw-9825\nGHSA-x744-4wpc-v9h2\nGHSA-xmgr-9pqc-h5vw",
+      "e394c14025a31210c549e8c78fca9419d8fbcc23": "Publish GHSA-x744-4wpc-v9h2"
+    },
     "GHSA-WG65-39GG-5WFJ": {
       "61728ce4a50c5cc16672ffd35805f78bbf64c18b": "Publish GHSA-wg65-39gg-5wfj",
       "beb3d58542bf71a4fcf42598abdea8b1a13bd6f6": "Merge pull request #7886 from github/noren95-GHSA-wg65-39gg-5wfj",
@@ -6523,13 +6617,6 @@
       "bf2e2ab4687e3840d3ae537224ca3dbe9e3c1067": "Publish GHSA-m5wg-cjgh-223j",
       "e669840a3c688dbdc33d628dd76c12be3ae82ef6": "Publish Advisories\n\nGHSA-p2gh-cfq4-4wjc\nGHSA-f3g8-9xv5-77gv\nGHSA-m5wg-cjgh-223j\nGHSA-qjfj-3mm5-vrjg\nGHSA-r7w7-9xr2-qq2r\nGHSA-qjfj-3mm5-vrjg"
     },
-    "GHSA-X744-4WPC-V9H2": {
-      "b5842c4d2a6f6cb5ed9f7ac7ca6b9460a18e2032": "Improve GHSA-x744-4wpc-v9h2",
-      "07a7f5b8c2f8fd4a599624c04e62283436b45a57": "Publish Advisories\n\nGHSA-5wfc-hjrc-gq87\nGHSA-x744-4wpc-v9h2\nGHSA-37w4-hwhx-4rc4",
-      "eee5dc2cf945fa7cf671b0d4188876d2f50a0ef8": "Publish GHSA-x744-4wpc-v9h2",
-      "3eaa1ef4b7fbd72ecd2faf01f9211e79f2a3f6af": "Publish Advisories\n\nGHSA-c4r5-fxqw-vh93\nGHSA-m959-cc7f-wv43\nGHSA-qh6h-p6c9-ff54\nGHSA-qj8w-gfj5-8c6v\nGHSA-x34h-54cw-9825\nGHSA-x744-4wpc-v9h2\nGHSA-xmgr-9pqc-h5vw",
-      "e394c14025a31210c549e8c78fca9419d8fbcc23": "Publish GHSA-x744-4wpc-v9h2"
-    },
     "GHSA-VF77-8H7G-GGHP": {
       "41487e4c1baea9e401a3822fcf9a987ac5354b2d": "Improve GHSA-vf77-8h7g-gghp",
       "a117bd30c64fadec6defc5b224a472122747af27": "Publish Advisories\n\nGHSA-qcxh-w3j9-58qr\nGHSA-vf77-8h7g-gghp",
@@ -12485,9 +12572,6 @@
     "GHSA-2883-WWH7-X57V": {
       "8d7b8d951324919296a2682031bfcb852dfdec69": "Publish Advisories\n\nGHSA-2883-wwh7-x57v\nGHSA-698x-9w2p-7vvp\nGHSA-6hcw-qqr8-pjj8\nGHSA-85rw-g4f4-jprr\nGHSA-r6vm-4xwg-w69h\nGHSA-vmfc-9982-2m45\nGHSA-85rw-g4f4-jprr"
     },
-    "GHSA-698X-9W2P-7VVP": {
-      "8d7b8d951324919296a2682031bfcb852dfdec69": "Publish Advisories\n\nGHSA-2883-wwh7-x57v\nGHSA-698x-9w2p-7vvp\nGHSA-6hcw-qqr8-pjj8\nGHSA-85rw-g4f4-jprr\nGHSA-r6vm-4xwg-w69h\nGHSA-vmfc-9982-2m45\nGHSA-85rw-g4f4-jprr"
-    },
     "GHSA-85RW-G4F4-JPRR": {
       "8d7b8d951324919296a2682031bfcb852dfdec69": "Publish Advisories\n\nGHSA-2883-wwh7-x57v\nGHSA-698x-9w2p-7vvp\nGHSA-6hcw-qqr8-pjj8\nGHSA-85rw-g4f4-jprr\nGHSA-r6vm-4xwg-w69h\nGHSA-vmfc-9982-2m45\nGHSA-85rw-g4f4-jprr",
       "441ee0a69c53ec72cdf3253fe6bee96367c56395": "Publish Advisories\n\nGHSA-gcf2-x38g-f7w4\nGHSA-xg43-qr5w-q4jr\nGHSA-32gp-2g42-v9vc\nGHSA-4wh8-2pqj-9gw4\nGHSA-85rw-g4f4-jprr\nGHSA-cr37-3vx9-9f5f\nGHSA-f493-gq25-5c5x\nGHSA-qfqj-xxqv-cxfw\nGHSA-qp9q-4rh4-m8jc\nGHSA-vm9p-5mrq-6w5f"
@@ -14263,9 +14347,6 @@
     "GHSA-G3XR-5W5J-W4Q4": {
       "ca1d30f43e8633957d733a74c190ff090a740522": "Publish GHSA-g3xr-5w5j-w4q4"
     },
-    "GHSA-275C-XPVC-JGFW": {
-      "c8e3d01f13cfda055f96c87557f0f4f5e045a6b1": "Publish Advisories\n\nGHSA-275c-xpvc-jgfw\nGHSA-3c6j-hq33-3jv4\nGHSA-4m3v-q747-pc6h\nGHSA-7hxm-f538-3xp6\nGHSA-rj6p-xmxr-qj4h\nGHSA-vxx3-6hc9-7cc3"
-    },
     "GHSA-3C6J-HQ33-3JV4": {
       "c8e3d01f13cfda055f96c87557f0f4f5e045a6b1": "Publish Advisories\n\nGHSA-275c-xpvc-jgfw\nGHSA-3c6j-hq33-3jv4\nGHSA-4m3v-q747-pc6h\nGHSA-7hxm-f538-3xp6\nGHSA-rj6p-xmxr-qj4h\nGHSA-vxx3-6hc9-7cc3"
     },
@@ -14400,10 +14481,6 @@
     "GHSA-JGPV-4H4C-XHW3": {
       "7d97467cef887c0dad3a8ee1c4f13fd50f377ffd": "Improve GHSA-jgpv-4h4c-xhw3"
     },
-    "GHSA-8988-4F7V-96QF": {
-      "b2eedf586f7a382fecf533870567d65b9b85586a": "Improve GHSA-8988-4f7v-96qf",
-      "a0b2d8824919e067afbb32c9362255e0f422998f": "Publish Advisories\n\nGHSA-6v32-fjc9-9qf6\nGHSA-8988-4f7v-96qf\nGHSA-jp82-jpqv-5vv3\nGHSA-pw6j-qg29-8w7f"
-    },
     "GHSA-JQQ5-WC57-F8HJ": {
       "33e145ac2cb41ef0b65b2e35d37badcd76af98e8": "Publish Advisories\n\nGHSA-jqq5-wc57-f8hj\nGHSA-x34r-63hx-w57f\nGHSA-mxfr-6hcw-j9rq",
       "7f4130fa566391920fa5c7cbfe3afad6ee1adcb1": "Publish Advisories\n\nGHSA-22c2-9gwg-mj59\nGHSA-hjq4-87xh-g4fv\nGHSA-jqq5-wc57-f8hj",
@@ -20793,11 +20870,6 @@
       "e02f0b1d19fd76b41d6baee13da9c2d2094bba76": "Publish Advisories\n\nGHSA-4hm9-844j-jmxp\nGHSA-wgjv-9j3q-jhg8\nGHSA-g857-hhfv-j68w\nGHSA-3363-2ph6-35wh\nGHSA-73jc-5mrq-prw7\nGHSA-799f-29jm-gr6c\nGHSA-9xq9-36w5-q796\nGHSA-h9cc-w26m-j342\nGHSA-jrrg-99xh-5j2q\nGHSA-m549-qq94-fvhg\nGHSA-mw3q-r9wh-h2ff\nGHSA-vghx-352f-93jm\nGHSA-wmhf-fqc8-vxhh\nGHSA-5g86-85rp-f9hx\nGHSA-8qhj-4f8c-j8qg\nGHSA-cj8g-prcm-mfg5\nGHSA-mqq6-462x-jxmm\nGHSA-vrmh-5mmx-hjwx",
       "701afdcaa162b75c7bc31fa583778a77852f2de5": "Publish Advisories\n\nGHSA-75cm-x2w3-8mgf\nGHSA-799f-29jm-gr6c"
     },
-    "GHSA-9XQ9-36W5-Q796": {
-      "e02f0b1d19fd76b41d6baee13da9c2d2094bba76": "Publish Advisories\n\nGHSA-4hm9-844j-jmxp\nGHSA-wgjv-9j3q-jhg8\nGHSA-g857-hhfv-j68w\nGHSA-3363-2ph6-35wh\nGHSA-73jc-5mrq-prw7\nGHSA-799f-29jm-gr6c\nGHSA-9xq9-36w5-q796\nGHSA-h9cc-w26m-j342\nGHSA-jrrg-99xh-5j2q\nGHSA-m549-qq94-fvhg\nGHSA-mw3q-r9wh-h2ff\nGHSA-vghx-352f-93jm\nGHSA-wmhf-fqc8-vxhh\nGHSA-5g86-85rp-f9hx\nGHSA-8qhj-4f8c-j8qg\nGHSA-cj8g-prcm-mfg5\nGHSA-mqq6-462x-jxmm\nGHSA-vrmh-5mmx-hjwx",
-      "e4d0ff855ce7ff5837da1c14ad4b547784f09c1c": "Publish GHSA-9xq9-36w5-q796",
-      "7d8049e51ad706d7016304e96169eb910460918a": "Publish GHSA-9xq9-36w5-q796"
-    },
     "GHSA-H9CC-W26M-J342": {
       "e02f0b1d19fd76b41d6baee13da9c2d2094bba76": "Publish Advisories\n\nGHSA-4hm9-844j-jmxp\nGHSA-wgjv-9j3q-jhg8\nGHSA-g857-hhfv-j68w\nGHSA-3363-2ph6-35wh\nGHSA-73jc-5mrq-prw7\nGHSA-799f-29jm-gr6c\nGHSA-9xq9-36w5-q796\nGHSA-h9cc-w26m-j342\nGHSA-jrrg-99xh-5j2q\nGHSA-m549-qq94-fvhg\nGHSA-mw3q-r9wh-h2ff\nGHSA-vghx-352f-93jm\nGHSA-wmhf-fqc8-vxhh\nGHSA-5g86-85rp-f9hx\nGHSA-8qhj-4f8c-j8qg\nGHSA-cj8g-prcm-mfg5\nGHSA-mqq6-462x-jxmm\nGHSA-vrmh-5mmx-hjwx",
       "029dd82c85e04e60954ebb60f830aaf5135d6fa7": "Publish Advisories\n\nGHSA-h9cc-w26m-j342\nGHSA-vghx-352f-93jm"
@@ -23293,10 +23365,6 @@
       "3e1fb4969f43956da277730db223a306b105d189": "Publish Advisories\n\nGHSA-43gx-6gv6-3jcp\nGHSA-68j8-pq59-fqgm\nGHSA-h8wq-7xc4-p3qx\nGHSA-hqmj-h5c6-369m\nGHSA-mgx6-5cf9-rr43",
       "edc71ce67b229b8cabeced5ff673bb67588263c9": "Publish Advisories\n\nGHSA-43gx-6gv6-3jcp\nGHSA-45m3-398w-m2m9\nGHSA-4fqm-6fmh-82mq\nGHSA-79pf-vx4x-7jmm\nGHSA-hw26-mmpg-fqfg\nGHSA-jrqm-vmqc-gm93\nGHSA-mr74-928f-rw69\nGHSA-p4v8-rw59-93cq\nGHSA-p5cm-246w-84jm\nGHSA-pc8g-78pf-4xrp\nGHSA-xvp8-3mhv-424c"
     },
-    "GHSA-68J8-PQ59-FQGM": {
-      "3e1fb4969f43956da277730db223a306b105d189": "Publish Advisories\n\nGHSA-43gx-6gv6-3jcp\nGHSA-68j8-pq59-fqgm\nGHSA-h8wq-7xc4-p3qx\nGHSA-hqmj-h5c6-369m\nGHSA-mgx6-5cf9-rr43",
-      "439b64354fe2e4289e1e7aaeb7a93e69f8629a24": "Publish Advisories\n\nGHSA-68j8-pq59-fqgm\nGHSA-4j28-22qp-rjcf\nGHSA-vc5j-42hh-j3mr\nGHSA-3r34-vq8m-39gh"
-    },
     "GHSA-H8WQ-7XC4-P3QX": {
       "3e1fb4969f43956da277730db223a306b105d189": "Publish Advisories\n\nGHSA-43gx-6gv6-3jcp\nGHSA-68j8-pq59-fqgm\nGHSA-h8wq-7xc4-p3qx\nGHSA-hqmj-h5c6-369m\nGHSA-mgx6-5cf9-rr43",
       "0dd769671504908de7b843bc1dd4a6ce643a12e2": "Publish Advisories\n\nGHSA-h8wq-7xc4-p3qx\nGHSA-29x4-r6jv-ff4w\nGHSA-452v-w3gx-72wg\nGHSA-8m29-fpq5-89jj\nGHSA-9j88-vvj5-vhgr"

data/fix-commits/angular-cli-4a405ed0.json

@@ -1,6 +1,14 @@
 {
   "vcs_url": "https://github.com/angular/angular-cli",
   "vulnerabilities": {
+    "GHSA-M28W-2PQF-7QGJ": {
+      "94b620acd76e39c7d5cc8527dfc6fe9096855cbd": "fix(@angular-devkit/build-angular): update webpack-dev-server to 5.2.6\n\nMitigates GHSA-m28w-2pqf-7qgj and GHSA-f5vj-f2hx-8m93.\nFixes #33903",
+      "b0047b04f56f5cb3fb8e4465ba0fad777497144a": "fix(@angular-devkit/build-angular): update webpack-dev-server to 5.2.6\n\nMitigates GHSA-m28w-2pqf-7qgj and GHSA-f5vj-f2hx-8m93.\nFixes #33903"
+    },
+    "GHSA-F5VJ-F2HX-8M93": {
+      "94b620acd76e39c7d5cc8527dfc6fe9096855cbd": "fix(@angular-devkit/build-angular): update webpack-dev-server to 5.2.6\n\nMitigates GHSA-m28w-2pqf-7qgj and GHSA-f5vj-f2hx-8m93.\nFixes #33903",
+      "b0047b04f56f5cb3fb8e4465ba0fad777497144a": "fix(@angular-devkit/build-angular): update webpack-dev-server to 5.2.6\n\nMitigates GHSA-m28w-2pqf-7qgj and GHSA-f5vj-f2hx-8m93.\nFixes #33903"
+    },
     "CVE-2026-13697": {
       "f7f60e69e77cda60378543a9ca9cc2c76c0bf34f": "fix(@angular/build): bump undici to 7.29.0\n\nBumps undici to version 7.29.0 to resolve a number of CVEs including CVE-2026-13697 (GHSA-4cwx-7wf7-3272) and CVE-2026-16729 (GHSA-v3r7-h72x-cjcm).\n\nCloses #33822",
       "f348efe8b6d9c9d7014afb331eecda0a9478ba0a": "fix(@angular-devkit/build-angular): bump undici to 7.29.0\n\nBumps undici to version 7.29.0 to resolve a number of CVEs including CVE-2026-13697 (GHSA-4cwx-7wf7-3272) and CVE-2026-16729 (GHSA-v3r7-h72x-cjcm).\n\nCloses #33822"

data/fix-commits/buildroot-0b809119.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://github.com/buildroot/buildroot",
   "vulnerabilities": {
+    "CVE-2026-62356": {
+      "fab3c4eb92877284f39ba59289affc8fcbccf1a7": "package/redis: security bump to v8.10.1\n\nSee the release notes:\nhttps://github.com/redis/redis/blob/8.10.1/00-RELEASENOTES\n\nNotably, this fixes CVE-2026-62356: miscalculated buffer size in\n`CMSketch` RDB loading may lead to heap OOB write, as well as other\nsecurity fixes without CVE number\n\nSigned-off-by: Titouan Christophe <titouan.christophe@mind.be>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
+    },
     "CVE-2026-58264": {
       "566bdcb97f5706aa08f40a88e4728e4a0bed8257": "package/fluidsynth: security bump to version 2.5.7\n\nFor change log since v2.4.7, see:\nhttps://github.com/FluidSynth/fluidsynth/releases\n\nAccording to:\nhttps://github.com/FluidSynth/fluidsynth/blob/master/doc/wiki/ChangeLog.md\n\nFluidSynth 2.5.6 fixes:\nCVE-2026-58264 - a heap-based buffer overrun in command handler (GHSA-mqmq-w63q-cj94)\nCVE-2026-61714 - a heap-based buffer overflow in MIDI player (GHSA-976m-35rw-h3m6)\nCVE-2026-61721 - a heap-based buffer overrun for DLS samples (GHSA-59ph-rx8r-8p4j)\nCVE-2026-61723 - a DLS ptbl chunk integer overflow (GHSA-r4mc-v3p8-pv47)\nCVE-2026-61722 - a DLS articulation chunk integer overflow (GHSA-hp72-35pr-6h6r)\nCVE-2026-61720 - a SF2 DMOD chunk integer underflow (GHSA-rmc4-c8hw-455w)\n\nFluidSynth 2.5.2 fixes:\nCVE-2025-68617 - a heap-based use-after-free involving DLS files (GHSA-ffw2-xvvp-39ch)\n\nSDL2 audio support was removed upstream in commit:\nhttps://github.com/FluidSynth/fluidsynth/commit/89145b004a44a53e734b6bf82a73cef255baef5d\n\nIt was replaced by the newer SDL3. This commit reflects that change\n(update option name and comments, add legacy option entry).\n\nAlso, dynamic library dependency was added in Buildroot commit:\nhttps://gitlab.com/buildroot.org/buildroot/-/commit/111a1c7091aed6f9da03c2a095bcc2f50a1ad32c\nThis commot removes the duplicate dependency for SDL3.\n\nFluidSynth also added a native DLS soundfont support in:\nhttps://github.com/FluidSynth/fluidsynth/commit/c959f8d208bbad9e396dfb745285806b5a4c5a07\nIt is enabled by default and uses C++17. This commit adds a new\noption with a dependency on gcc >= 7.\n\nThe license option hash is also updated, after the FSF address\nupdate in:\nhttps://github.com/FluidSynth/fluidsynth/commit/db42fa333baf1cb7c60556ab75ad1e592c850f68\n\nSigned-off-by: Julien Olivain <ju.o@free.fr>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>"
     },