From 4a0090aa90194d5c5252a1c328346cf7c5ed4e31 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 05:41:32 -0400
Subject: [PATCH 1/2] Add pnpm stage download fix reference

---
 .../2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json b/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json
index c42cfe1da7d29..4d1353f2ac105 100644
--- a/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json
+++ b/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json
@@ -48,6 +48,10 @@
       "type": "WEB",
       "url": "https://github.com/pnpm/pnpm/pull/12303"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pnpm/pnpm/commit/65443f4bdf1f0db9c8c7dc58fee25252607e9234"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/pnpm/pnpm"
@@ -63,4 +67,4 @@
     "github_reviewed_at": "2026-06-26T23:54:52Z",
     "nvd_published_at": "2026-06-25T18:16:41Z"
   }
-}
\ No newline at end of file
+}

From 07226602f265092791b3c72dbb249c725d26ef86 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Wed, 8 Jul 2026 02:23:34 -0400
Subject: [PATCH 2/2] Add pnpm stage download release reference

---
 .../2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json b/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json
index 4d1353f2ac105..ffbacfe20f162 100644
--- a/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json
+++ b/advisories/github-reviewed/2026/06/GHSA-v23m-ccfg-pq9h/GHSA-v23m-ccfg-pq9h.json
@@ -52,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/pnpm/pnpm/commit/65443f4bdf1f0db9c8c7dc58fee25252607e9234"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pnpm/pnpm/releases/tag/v11.5.3"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/pnpm/pnpm"