From 7ad00dfcbb9f70139c73152f1d867d8399b7210a Mon Sep 17 00:00:00 2001 From: Daniele De Lorenzi <2905124+dark-vex@users.noreply.github.com> Date: Wed, 19 Aug 2026 10:34:19 +0200 Subject: [PATCH 1/2] feat(GHSA-crf3-v9rr-v7hj): Added fixed version Version `1.2.84` of `com.alibaba:fastjson` is not affected by CVE-2026-16723 so we can set it as fixed version (https://mvnrepository.com/artifact/com.alibaba/fastjson/1.2.84/changes) --- .../2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json b/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json index d2d8d8e151ce..e0d0b3d87743 100644 --- a/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json +++ b/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json @@ -29,6 +29,9 @@ }, { "last_affected": "1.2.83" + }, + { + "fixed": "1.2.84" } ] } @@ -58,4 +61,4 @@ "github_reviewed_at": "2026-08-07T18:18:20Z", "nvd_published_at": "2026-07-23T09:16:26Z" } -} \ No newline at end of file +} From 34708122f97f5246a48b0977753e92751cae1590 Mon Sep 17 00:00:00 2001 From: Daniele De Lorenzi <2905124+dark-vex@users.noreply.github.com> Date: Wed, 19 Aug 2026 10:40:16 +0200 Subject: [PATCH 2/2] Removed last_affected field as per PR check --- .../2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json | 3 --- 1 file changed, 3 deletions(-) diff --git a/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json b/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json index e0d0b3d87743..904390412d3a 100644 --- a/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json +++ b/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json @@ -27,9 +27,6 @@ { "introduced": "1.2.68" }, - { - "last_affected": "1.2.83" - }, { "fixed": "1.2.84" }