From a7719a4f1522cee417f69988de1ba4ef8acd9e64 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 02:53:43 -0400
Subject: [PATCH] Add PDM installer path traversal fix reference

---
 .../2026/06/GHSA-78v8-vpjp-cjqh/GHSA-78v8-vpjp-cjqh.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-78v8-vpjp-cjqh/GHSA-78v8-vpjp-cjqh.json b/advisories/github-reviewed/2026/06/GHSA-78v8-vpjp-cjqh/GHSA-78v8-vpjp-cjqh.json
index 24b4dd5ac8842..d45b5cdccda38 100644
--- a/advisories/github-reviewed/2026/06/GHSA-78v8-vpjp-cjqh/GHSA-78v8-vpjp-cjqh.json
+++ b/advisories/github-reviewed/2026/06/GHSA-78v8-vpjp-cjqh/GHSA-78v8-vpjp-cjqh.json
@@ -47,6 +47,10 @@
       "type": "WEB",
       "url": "https://github.com/pdm-project/pdm/pull/3787"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pdm-project/pdm/commit/41aa5f94a30e51b1a460af27312dd9dc532aad5a"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/pdm-project/pdm"