From 5c1781e069adc107fad5401f6639f5db68a34c43 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 07:07:42 -0400 Subject: [PATCH 1/2] Add acastellon auth NVD reference --- .../2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json b/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json index b29d829c7ecdd..7820b1ab0bf23 100644 --- a/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json +++ b/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json @@ -40,6 +40,10 @@ "type": "WEB", "url": "https://github.com/antonio-castellon/module-auth/security/advisories/GHSA-gfj5-979r-92pw" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58399" + }, { "type": "WEB", "url": "https://github.com/antonio-castellon/module-auth/issues/6" @@ -62,4 +66,4 @@ "github_reviewed_at": "2026-06-18T17:22:47Z", "nvd_published_at": null } -} \ No newline at end of file +} From 38328b11d2fdf9f8c5b0fea6502ec633ecfb0381 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 13:48:52 -0400 Subject: [PATCH 2/2] Mark acastellon auth fixed package reference --- .../2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json b/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json index 7820b1ab0bf23..8079c38a603d0 100644 --- a/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json +++ b/advisories/github-reviewed/2026/06/GHSA-gfj5-979r-92pw/GHSA-gfj5-979r-92pw.json @@ -53,7 +53,7 @@ "url": "https://github.com/antonio-castellon/module-auth" }, { - "type": "WEB", + "type": "PACKAGE", "url": "https://www.npmjs.com/package/@acastellon/auth/v/2.3.0" } ],