From b203867ce51753ab76ca5859832c85cd055b9bde Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 08:40:23 -0400
Subject: [PATCH 1/2] Add GeoServer SSRF fix references

---
 .../GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json b/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json
index 0c295645cb978..fc934785325d4 100644
--- a/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json
+++ b/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json
@@ -113,6 +113,22 @@
       "type": "WEB",
       "url": "https://github.com/geoserver/geoserver/pull/8622"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/geoserver/geoserver/commit/b85ff6df2ad7ca30fd23e31c15fa504ecb1b31e5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/geoserver/geoserver/commit/68474568a92cc37cf12884efe648946e65407946"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/geoserver/geoserver/releases/tag/2.26.4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/geoserver/geoserver/releases/tag/2.27.3"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/geoserver/geoserver"

From be9ead2af9756ac44fb6b2ed61cf058c754a1e5d Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Wed, 8 Jul 2026 02:42:18 -0400
Subject: [PATCH 2/2] Add GeoServer SSRF NVD and backport references

---
 .../GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json b/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json
index fc934785325d4..ad9ed47fa9f69 100644
--- a/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json
+++ b/advisories/github-reviewed/2026/06/GHSA-x4r9-gmw3-hxww/GHSA-x4r9-gmw3-hxww.json
@@ -109,14 +109,26 @@
       "type": "WEB",
       "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-x4r9-gmw3-hxww"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58175"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/geoserver/geoserver/pull/8622"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/geoserver/geoserver/pull/8753"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/geoserver/geoserver/commit/b85ff6df2ad7ca30fd23e31c15fa504ecb1b31e5"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/geoserver/geoserver/pull/8754"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/geoserver/geoserver/commit/68474568a92cc37cf12884efe648946e65407946"
@@ -143,6 +155,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-06-12T18:23:35Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-06-18T16:16:52Z"
   }
-}
\ No newline at end of file
+}