From 6903feb6154e8ac19c524469483a736417f6373d Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Mon, 29 Jun 2026 06:08:44 -0400 Subject: [PATCH 1/2] Add Cargo sparse registry fix reference --- .../2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json b/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json index d5f9350fddc41..b60fb992f3449 100644 --- a/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json +++ b/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/rust-lang/cargo/pull/17031" }, + { + "type": "WEB", + "url": "https://github.com/rust-lang/cargo/commit/3c51f26a26501ac51fd593db0d21f88719c65b1b" + }, { "type": "WEB", "url": "https://blog.rust-lang.org/2026/05/25/cve-2026-5222" From e6c45b93ffd380b45b7fa72925978d1e6f53190f Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Wed, 8 Jul 2026 02:25:30 -0400 Subject: [PATCH 2/2] Add Cargo sparse registry backport PR reference --- .../2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json b/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json index b60fb992f3449..7781ebb6b6a57 100644 --- a/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json +++ b/advisories/github-reviewed/2026/06/GHSA-p688-r7jv-fm6f/GHSA-p688-r7jv-fm6f.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/rust-lang/cargo/pull/17031" }, + { + "type": "WEB", + "url": "https://github.com/rust-lang/cargo/pull/17030" + }, { "type": "WEB", "url": "https://github.com/rust-lang/cargo/commit/3c51f26a26501ac51fd593db0d21f88719c65b1b" @@ -74,4 +78,4 @@ "github_reviewed_at": "2026-06-26T21:47:54Z", "nvd_published_at": "2026-05-25T10:16:15Z" } -} \ No newline at end of file +}