From 7f8c47e9a1a370849c0d7c088f365e6843241b0b Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 06:25:34 -0400
Subject: [PATCH 1/4] Add Apollo Router NVD reference

---
 .../2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
index 315f3eb069e6a..89b5d18e76697 100644
--- a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
+++ b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/apollographql/router/security/advisories/GHSA-cgqf-3cq5-wvcj"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28101"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/apollographql/router/commit/9e9527c73c8f34fc8438b09066163cd42520f413"
@@ -58,4 +62,4 @@
     "github_reviewed_at": "2024-03-06T18:24:17Z",
     "nvd_published_at": "2024-03-21T02:52:23Z"
   }
-}
\ No newline at end of file
+}

From 4d7a6d0cf193d00995c108fb82e8194d52b2a0d1 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 10:42:35 -0400
Subject: [PATCH 2/4] Add Apollo Router fixed release reference

---
 .../2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
index 89b5d18e76697..91bf17b737161 100644
--- a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
+++ b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
@@ -44,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28101"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apollographql/router/releases/tag/v1.40.2"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/apollographql/router/commit/9e9527c73c8f34fc8438b09066163cd42520f413"

From 22a257b6eab32cda38747d1904f0b60ca877b73c Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 13:07:24 -0400
Subject: [PATCH 3/4] Add Apollo Router fixed package reference

---
 .../2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
index 91bf17b737161..8ac4a977fbf3e 100644
--- a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
+++ b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
@@ -48,6 +48,10 @@
       "type": "WEB",
       "url": "https://github.com/apollographql/router/releases/tag/v1.40.2"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://crates.io/crates/apollo-router/1.40.2"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/apollographql/router/commit/9e9527c73c8f34fc8438b09066163cd42520f413"

From 1de77b036a87b79dba08f63c2f2d07ccba6876a7 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Fri, 10 Jul 2026 13:40:42 -0400
Subject: [PATCH 4/4] Remove broken crates.io version reference

---
 .../2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json      | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
index 8ac4a977fbf3e..91bf17b737161 100644
--- a/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
+++ b/advisories/github-reviewed/2024/03/GHSA-cgqf-3cq5-wvcj/GHSA-cgqf-3cq5-wvcj.json
@@ -48,10 +48,6 @@
       "type": "WEB",
       "url": "https://github.com/apollographql/router/releases/tag/v1.40.2"
     },
-    {
-      "type": "PACKAGE",
-      "url": "https://crates.io/crates/apollo-router/1.40.2"
-    },
     {
       "type": "WEB",
       "url": "https://github.com/apollographql/router/commit/9e9527c73c8f34fc8438b09066163cd42520f413"