From a6f4a8a5619a3a5a0568c56ace075e5502cdebca Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 06:44:19 -0400
Subject: [PATCH 1/3] Add CBOR NVD reference

---
 .../2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json b/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
index a5e280101c2cb..ce3be9f3ebc74 100644
--- a/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
+++ b/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
@@ -35,6 +35,10 @@
       "type": "WEB",
       "url": "https://github.com/peteroupc/CBOR/security/advisories/GHSA-6r92-cgxc-r5fg"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21909"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/peteroupc/CBOR/commit/b4117dbbb4cd5a4a963f9d0c9aa132f033e15b95"
@@ -57,4 +61,4 @@
     "github_reviewed_at": "2022-01-18T22:57:46Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}

From 1f4fef147c8df955a8ca09cd42f7587258a5e0ff Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 11:08:23 -0400
Subject: [PATCH 2/3] Add CBOR fixed release reference

---
 .../2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json b/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
index ce3be9f3ebc74..5e5a612e27294 100644
--- a/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
+++ b/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
@@ -39,6 +39,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21909"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/peteroupc/CBOR/releases/tag/v4.5.1"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/peteroupc/CBOR/commit/b4117dbbb4cd5a4a963f9d0c9aa132f033e15b95"

From 3f89bde5bbb51dbfce4b3a2c3014e5481efbebd7 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 20:07:50 -0400
Subject: [PATCH 3/3] Set CBOR NVD published timestamp

---
 .../2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json b/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
index 5e5a612e27294..7da42b152c847 100644
--- a/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
+++ b/advisories/github-reviewed/2022/01/GHSA-6r92-cgxc-r5fg/GHSA-6r92-cgxc-r5fg.json
@@ -63,6 +63,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2022-01-18T22:57:46Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-01-03T16:15:09Z"
   }
 }