From 2ef6556f40313e2d4bf8aa73c8eef2f92648be23 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Sun, 28 Jun 2026 20:38:08 -0400
Subject: [PATCH 1/2] Add PhpSpreadsheet wrapper bypass fix references

---
 .../2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json b/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json
index 8472fa5195d60..5adb6a5993273 100644
--- a/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json
+++ b/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json
@@ -47,6 +47,14 @@
       "type": "PACKAGE",
       "url": "https://github.com/PHPOffice/PhpSpreadsheet"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/PHPOffice/PhpSpreadsheet/releases/tag/1.30.5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/PHPOffice/PhpSpreadsheet/commit/1433b34843af9f572cb4ad6b3ff92efce32e6c71"
+    },
     {
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-q4q6-r8wh-5cgh"

From 1d80374d5b4311e61159d45165896e6c01e4d14d Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 14:23:42 -0400
Subject: [PATCH 2/2] Add PhpSpreadsheet NVD reference

---
 .../2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json b/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json
index 5adb6a5993273..f3ddd4284654e 100644
--- a/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json
+++ b/advisories/github-reviewed/2026/06/GHSA-87m4-826x-3crx/GHSA-87m4-826x-3crx.json
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-87m4-826x-3crx"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45034"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/PHPOffice/PhpSpreadsheet"
@@ -69,4 +73,4 @@
     "github_reviewed_at": "2026-06-08T23:00:14Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}