From 16b6a54cc9a8342ad07235c24ae3aedd3a4773e5 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 04:23:59 -0400
Subject: [PATCH 1/2] Add parse-server file extension XSS fix references

---
 .../06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json    | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json b/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json
index 06c5e1aaa4c0c..2d58215ebf253 100644
--- a/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json
+++ b/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json
@@ -66,10 +66,18 @@
       "type": "WEB",
       "url": "https://github.com/parse-community/parse-server/pull/10505"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/commit/be12a60d65b6e140481882037fb896b1f951df50"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/parse-community/parse-server/pull/10506"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/commit/97c6a78d19f976ec756c1295f08a8fccab90799a"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/parse-community/parse-server"
@@ -84,4 +92,4 @@
     "github_reviewed_at": "2026-06-19T19:36:36Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}

From 566c02b1d702070a0d78ff4cb00f3466d7c2baf2 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Wed, 8 Jul 2026 02:08:03 -0400
Subject: [PATCH 2/2] Add parse-server file extension XSS release references

---
 .../2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json b/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json
index 2d58215ebf253..e38d9a20e861d 100644
--- a/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json
+++ b/advisories/github-reviewed/2026/06/GHSA-v8x7-r927-cc93/GHSA-v8x7-r927-cc93.json
@@ -70,6 +70,10 @@
       "type": "WEB",
       "url": "https://github.com/parse-community/parse-server/commit/be12a60d65b6e140481882037fb896b1f951df50"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/releases/tag/9.9.1-alpha.11"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/parse-community/parse-server/pull/10506"
@@ -78,6 +82,10 @@
       "type": "WEB",
       "url": "https://github.com/parse-community/parse-server/commit/97c6a78d19f976ec756c1295f08a8fccab90799a"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/parse-community/parse-server/releases/tag/8.6.81"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/parse-community/parse-server"