From 760763bffb8e432a6ff78fac82306d1321d21b91 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 30 Jun 2026 02:54:18 -0400
Subject: [PATCH 1/2] Add OpenClaw fixed package reference

---
 .../2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json b/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json
index 58839fb56e7dd..4998c259d5899 100644
--- a/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json
+++ b/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json
@@ -52,6 +52,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/openclaw/openclaw"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://www.npmjs.com/package/openclaw/v/2026.4.29"
+    },
     {
       "type": "WEB",
       "url": "https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"
@@ -66,4 +70,4 @@
     "github_reviewed_at": "2026-06-18T20:33:54Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}

From 6498b2c6d03882f762b47588498223786c7b84ee Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 30 Jun 2026 15:37:10 -0400
Subject: [PATCH 2/2] Add OpenClaw fixed source tag reference

---
 .../2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json b/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json
index 4998c259d5899..a32f22eba96e5 100644
--- a/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json
+++ b/advisories/github-reviewed/2026/06/GHSA-24vr-rprv-67rf/GHSA-24vr-rprv-67rf.json
@@ -52,6 +52,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/openclaw/openclaw"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openclaw/openclaw/tree/v2026.4.29"
+    },
     {
       "type": "PACKAGE",
       "url": "https://www.npmjs.com/package/openclaw/v/2026.4.29"