From c6d540b7fff2a8e640f70f5305a5b6be44190738 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 06:45:07 -0400
Subject: [PATCH 1/4] Add TinyMCE CVE-2024-21908 NVD reference

---
 .../2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
index b704a9e8b4172..539f160fb521d 100644
--- a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
+++ b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
@@ -78,6 +78,10 @@
       "type": "WEB",
       "url": "https://github.com/tinymce/tinymce/security/advisories/GHSA-5h9g-x5rv-25wg"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21908"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/tinymce/tinymce"
@@ -96,4 +100,4 @@
     "github_reviewed_at": "2021-10-22T13:49:23Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}

From 25d1d5fc80bf5fd3e306067550c11bccc714faea Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 10:59:49 -0400
Subject: [PATCH 2/4] Add TinyMCE CVE-2024-21908 fixed release reference

---
 .../2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
index 539f160fb521d..6ecba8b34e370 100644
--- a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
+++ b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
@@ -82,6 +82,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21908"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/tinymce/tinymce/releases/tag/5.9.0"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/tinymce/tinymce"

From 0176e1f9456becc344d2391a11e0fd534c2eb567 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 12:42:49 -0400
Subject: [PATCH 3/4] Add TinyMCE 5.9.0 package references

---
 .../2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
index 6ecba8b34e370..24d6713aa945c 100644
--- a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
+++ b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
@@ -86,6 +86,14 @@
       "type": "WEB",
       "url": "https://github.com/tinymce/tinymce/releases/tag/5.9.0"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://www.npmjs.com/package/tinymce/v/5.9.0"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://packagist.org/packages/tinymce/tinymce#5.9.0"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/tinymce/tinymce"

From 7ca92e7d6106d34dc1a6bbd939c8a5d8738584e6 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 20:43:20 -0400
Subject: [PATCH 4/4] Set TinyMCE CVE-2024-21908 NVD published timestamp

---
 .../2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
index 24d6713aa945c..f2642ccaf3e75 100644
--- a/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
+++ b/advisories/github-reviewed/2021/10/GHSA-5h9g-x5rv-25wg/GHSA-5h9g-x5rv-25wg.json
@@ -110,6 +110,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2021-10-22T13:49:23Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-01-03T16:15:08Z"
   }
 }