# Advisory-fix pairs, batch 2 (2026-10-03): fixed-side negatives where the function SURVIVES the fix.
#
# Why: the decision engine's memory had 98 positives-only repository groups (2026-10-02-decision-engine-negatives-gap),
# 94 of them vibe-py pairs whose fixed side lost the function. This batch adds real (vulnerable, fixed) pairs of ONE
# function for the six families the engine compiles (access_control, deserialization, injection, output_encoding,
# path, untrusted_destination), mined at zero model cost from reviewed GitHub advisories (pip, npm, maven, composer),
# newest first, so most were published after 2026-06-01 (`post_cutoff = true`) and memorisation can be measured.
#
# Every pair: a reviewed GHSA advisory whose single fix commit (one parent) is linked from the advisory; at most 4
# non-test source files and 120 changed source lines (the fix, not a refactor); the function the commit changes most
# is declared exactly once on both sides (the label builder's matcher, learn.excerpt.function_bounds) and its body
# differs. The positive is that function at `parent`, the negative the same function at `commit`. The function is
# chosen by changed lines, not read from the advisory text: `provenance = "agent"`, `fix_lines` records the counts.
# Repositories: permissive licences only (SPDX from the API), none named anywhere else under benchmarks/ (populations
# v1/v2, every pair corpus), no WordPress plugin, and the reserved-population test passes. Go and Ruby were not taken
# (their excerpts fall outside the feature vocabulary's languages, 2026-10-02 record).
#
# Pointer pairs (vendored = false), the advisory-fixes slice and cache layout: materialize.py --catalog <this file>
# verifies the cached excerpts (verification.json beside this file). Screening record:
# benchmarks/measurements/2026-10-03-decision-engine-negatives-harvest/record.json. `split` alternates train/holdout
# by fix date within each family; one pair per repository.

[[pair]]
name = "prefect-token-validation-e216171"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "prefecthq/prefect"
cve = "CVE-2026-3514 GHSA-c635-393c-hcx2"
cwe = "CWE-863"
ecosystem = "pip"
published_at = "2026-06-02T09:36:15Z"
post_cutoff = true
commit = "e21617125335025b4b27e7d6f0ca028e8e8f3b79"
parent = "d7a24b6f7bd68168501d9ecb67dd50a2b23868db"
commit_url = "https://github.com/prefecthq/prefect/commit/e21617125335025b4b27e7d6f0ca028e8e8f3b79"
vendored = false
host = "github"
path = "src/prefect/server/api/server.py"
mode = "name"
relpath = "src/prefect/server/api/server.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-03-10"
fix_lines = { in_function = 7, in_file = 9, source_total = 14 }

[[pair.expected]]
cwe = "CWE-863"
class = "incorrect-authorization"
path = "src/prefect/server/api/server.py"
function = "token_validation"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-c635-393c-hcx2: Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready'"

[[pair]]
name = "arcadedb-getdatabasegroupsconfiguration-04110c0"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "arcadedata/arcadedb"
cve = "CVE-2026-44221 GHSA-fxc7-fm93-6q77"
cwe = "CWE-863"
ecosystem = "maven"
published_at = "2026-05-05T22:22:22Z"
post_cutoff = false
commit = "04110c06315da55604ac107f71fe7182f3a3deb8"
parent = "a28b5da98fdb57ac6dc5b5f94debe78b4ff4afd5"
commit_url = "https://github.com/arcadedata/arcadedb/commit/04110c06315da55604ac107f71fe7182f3a3deb8"
vendored = false
host = "github"
path = "server/src/main/java/com/arcadedb/server/security/ServerSecurity.java"
mode = "name"
relpath = "server/src/main/java/com/arcadedb/server/security/ServerSecurity.java"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-04-20"
fix_lines = { in_function = 32, in_file = 39, source_total = 51 }

[[pair.expected]]
cwe = "CWE-863"
class = "incorrect-authorization"
path = "server/src/main/java/com/arcadedb/server/security/ServerSecurity.java"
function = "getDatabaseGroupsConfiguration"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-fxc7-fm93-6q77: ArcadeDB vulnerable to cross-database authorization bypass and unsecured newly-created databases"

[[pair]]
name = "langflow-get-flow-by-id-or-endpoint-name-2c9f498"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "langflow-ai/langflow"
cve = "CVE-2026-55255 GHSA-qrpv-q767-xqq2"
cwe = "CWE-639"
ecosystem = "pip"
published_at = "2026-06-19T21:16:46Z"
post_cutoff = true
commit = "2c9f498d664a3c32698b57d7c5e752625291060e"
parent = "f4a2179bfddf8581ff1b1c671bafbffd8d2886e4"
commit_url = "https://github.com/langflow-ai/langflow/commit/2c9f498d664a3c32698b57d7c5e752625291060e"
vendored = false
host = "github"
path = "src/backend/base/langflow/helpers/flow.py"
mode = "name"
relpath = "src/backend/base/langflow/helpers/flow.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-04-22"
fix_lines = { in_function = 30, in_file = 27, source_total = 62 }

[[pair.expected]]
cwe = "CWE-639"
class = "idor"
path = "src/backend/base/langflow/helpers/flow.py"
function = "get_flow_by_id_or_endpoint_name"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-qrpv-q767-xqq2: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow"

[[pair]]
name = "grav-plugin-api-update-26f529c"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "getgrav/grav-plugin-api"
cve = "CVE-2026-42843 GHSA-r945-h4vm-h736"
cwe = "CWE-863"
ecosystem = "composer"
published_at = "2026-05-05T21:20:03Z"
post_cutoff = false
commit = "26f529c7d438c73343e82311fb095caeaf1a6116"
parent = "76d7b62e9450c517caed709260b2d03393778ce4"
commit_url = "https://github.com/getgrav/grav-plugin-api/commit/26f529c7d438c73343e82311fb095caeaf1a6116"
vendored = false
host = "github"
path = "classes/Api/Controllers/UsersController.php"
mode = "name"
relpath = "classes/Api/Controllers/UsersController.php"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-04-27"
fix_lines = { in_function = 15, in_file = 19, source_total = 21 }

[[pair.expected]]
cwe = "CWE-863"
class = "incorrect-authorization"
path = "classes/Api/Controllers/UsersController.php"
function = "update"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-r945-h4vm-h736: Grav API Privilege Escalation to Super Admin"

[[pair]]
name = "google-maps-mcp-main-00d8725"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "arthurkatcher/google-maps-mcp"
cve = "GHSA-52cq-7v8r-62c6"
cwe = "CWE-306"
ecosystem = "pip"
published_at = "2026-05-08T16:32:29Z"
post_cutoff = false
commit = "00d872507c78e8116bbf9de7be7cd112945c0fd8"
parent = "e671db68c804c9e67d51582d3280839ffa65f127"
commit_url = "https://github.com/arthurkatcher/google-maps-mcp/commit/00d872507c78e8116bbf9de7be7cd112945c0fd8"
vendored = false
host = "github"
path = "run.py"
mode = "name"
relpath = "run.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-05-03"
fix_lines = { in_function = 17, in_file = 15, source_total = 27 }

[[pair.expected]]
cwe = "CWE-306"
class = "missing-authentication"
path = "run.py"
function = "main"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-52cq-7v8r-62c6: gmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense"

[[pair]]
name = "camofox-mcp-createmcphttpapp-599f56e"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "redf0x1/camofox-mcp"
cve = "GHSA-7hgr-7h44-33w2"
cwe = "CWE-306"
ecosystem = "npm"
published_at = "2026-05-19T20:13:35Z"
post_cutoff = false
commit = "599f56ee40f8062aeca541c251ed1d39fb437f50"
parent = "f6289fdce0bab700475ea85eb456243758a371a7"
commit_url = "https://github.com/redf0x1/camofox-mcp/commit/599f56ee40f8062aeca541c251ed1d39fb437f50"
vendored = false
host = "github"
path = "src/http.ts"
mode = "name"
relpath = "src/http.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-05-12"
fix_lines = { in_function = 15, in_file = 42, source_total = 51 }

[[pair.expected]]
cwe = "CWE-306"
class = "missing-authentication"
path = "src/http.ts"
function = "createMcpHttpApp"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-7hgr-7h44-33w2: CamoFox MCP: Unauthenticated HTTP MCP browser-control surface"

[[pair]]
name = "spring-graphql-isoverridefor-63a89ed"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "spring-projects/spring-graphql"
cve = "CVE-2026-41856 GHSA-phxq-526m-79px"
cwe = "CWE-284"
ecosystem = "maven"
published_at = "2026-06-11T09:31:56Z"
post_cutoff = true
commit = "63a89ed1379be646822dca9779b15dbf2ce45839"
parent = "b53f2e9510a84599e385edc22df2aeeafafdd107"
commit_url = "https://github.com/spring-projects/spring-graphql/commit/63a89ed1379be646822dca9779b15dbf2ce45839"
vendored = false
host = "github"
path = "spring-graphql/src/main/java/org/springframework/graphql/data/method/HandlerMethod.java"
mode = "name"
relpath = "spring-graphql/src/main/java/org/springframework/graphql/data/method/HandlerMethod.java"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-05-17"
fix_lines = { in_function = 2, in_file = 1, source_total = 2 }

[[pair.expected]]
cwe = "CWE-284"
class = "access-control"
path = "spring-graphql/src/main/java/org/springframework/graphql/data/method/HandlerMethod.java"
function = "isOverrideFor"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-phxq-526m-79px: Spring for GraphQL: Annotation Detection Vulnerability"

[[pair]]
name = "jenkins-dofilltimezonenameitems-0586de4"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "MIT"
repo = "jenkinsci/jenkins"
cve = "CVE-2026-53439 GHSA-g28p-6mcc-v4rv"
cwe = "CWE-862"
ecosystem = "maven"
published_at = "2026-06-10T15:31:31Z"
post_cutoff = true
commit = "0586de425598497cfb4dcdafa5007e507a440a77"
parent = "a154e1108f3170dc036ecbe6b2a89f164ff1554e"
commit_url = "https://github.com/jenkinsci/jenkins/commit/0586de425598497cfb4dcdafa5007e507a440a77"
vendored = false
host = "github"
path = "core/src/main/java/hudson/model/TimeZoneProperty.java"
mode = "name"
relpath = "core/src/main/java/hudson/model/TimeZoneProperty.java"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-05-29"
fix_lines = { in_function = 3, in_file = 4, source_total = 6 }

[[pair.expected]]
cwe = "CWE-862"
class = "missing-authorization"
path = "core/src/main/java/hudson/model/TimeZoneProperty.java"
function = "doFillTimeZoneNameItems"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-g28p-6mcc-v4rv: Jenkins exposes other users' timezone and view names to users with Overall/Read permission"

[[pair]]
name = "netlicensing-mcp-dispatch-fbbb1d5"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "labs64/netlicensing-mcp"
cve = "CVE-2026-54446 GHSA-x9vc-9ffq-p3gj"
cwe = "CWE-306"
ecosystem = "pip"
published_at = "2026-07-14T20:47:19Z"
post_cutoff = true
commit = "fbbb1d5ff88eb5400ec933a84e75601ebee48927"
parent = "e826d695df5a08d250dc88e9d8843ff0042ce35a"
commit_url = "https://github.com/labs64/netlicensing-mcp/commit/fbbb1d5ff88eb5400ec933a84e75601ebee48927"
vendored = false
host = "github"
path = "src/netlicensing_mcp/server.py"
mode = "name"
relpath = "src/netlicensing_mcp/server.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-04"
fix_lines = { in_function = 41, in_file = 80, source_total = 102 }

[[pair.expected]]
cwe = "CWE-306"
class = "missing-authentication"
path = "src/netlicensing_mcp/server.py"
function = "dispatch"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-x9vc-9ffq-p3gj: NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode"

[[pair]]
name = "starlette-admin-validate-where-af05b45"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "jowilf/starlette-admin"
cve = "CVE-2026-54553 GHSA-6753-gr46-6wpr"
cwe = "CWE-639"
ecosystem = "pip"
published_at = "2026-08-26T14:14:37Z"
post_cutoff = true
commit = "af05b45cd90944b726949fd650ab9d19f1abafc3"
parent = "eb2b3ec33174f4f28f0997670e9ae1da8b09fdbd"
commit_url = "https://github.com/jowilf/starlette-admin/commit/af05b45cd90944b726949fd650ab9d19f1abafc3"
vendored = false
host = "github"
path = "starlette_admin/views.py"
mode = "name"
relpath = "starlette_admin/views.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-08"
fix_lines = { in_function = 16, in_file = 34, source_total = 52 }

[[pair.expected]]
cwe = "CWE-639"
class = "idor"
path = "starlette_admin/views.py"
function = "_validate_where"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-6753-gr46-6wpr: Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS"

[[pair]]
name = "next-auth-initauth-d008b9b"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "ISC"
repo = "nextauthjs/next-auth"
cve = "CVE-2026-73421 GHSA-8fpg-xm3f-6cx3"
cwe = "CWE-285"
ecosystem = "npm"
published_at = "2026-07-23T14:52:23Z"
post_cutoff = true
commit = "d008b9b764bf4b322a87e1822d1dda7789258d8f"
parent = "af42d8f6559aa118ab551274776d06b132775f82"
commit_url = "https://github.com/nextauthjs/next-auth/commit/d008b9b764bf4b322a87e1822d1dda7789258d8f"
vendored = false
host = "github"
path = "packages/next-auth/src/lib/index.ts"
mode = "name"
relpath = "packages/next-auth/src/lib/index.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-11"
fix_lines = { in_function = 12, in_file = 24, source_total = 31 }

[[pair.expected]]
cwe = "CWE-285"
class = "missing-authorization"
path = "packages/next-auth/src/lib/index.ts"
function = "initAuth"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-8fpg-xm3f-6cx3: Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)"

[[pair]]
name = "deepseek-mcp-server-starthttptransport-dab07ed"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "arikusi/deepseek-mcp-server"
cve = "CVE-2026-55605 GHSA-72f3-6w86-7rv3"
cwe = "CWE-306"
ecosystem = "npm"
published_at = "2026-08-25T18:38:30Z"
post_cutoff = true
commit = "dab07ed93ddde0ab219d4cb7066785847db53a32"
parent = "5e1302171e9941bacc2ec2f83fe313c914614328"
commit_url = "https://github.com/arikusi/deepseek-mcp-server/commit/dab07ed93ddde0ab219d4cb7066785847db53a32"
vendored = false
host = "github"
path = "src/transport-http.ts"
mode = "name"
relpath = "src/transport-http.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-14"
fix_lines = { in_function = 31, in_file = 70, source_total = 97 }

[[pair.expected]]
cwe = "CWE-306"
class = "missing-authentication"
path = "src/transport-http.ts"
function = "startHttpTransport"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-72f3-6w86-7rv3: @arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint"

[[pair]]
name = "network-ai-routerequest-a59c13a"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "jovancoding/network-ai"
cve = "GHSA-mxjx-28vx-xjjj"
cwe = "CWE-862"
ecosystem = "npm"
published_at = "2026-06-19T21:42:32Z"
post_cutoff = true
commit = "a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3"
parent = "344fb17362e873eefcdacb83415dbb3487bd1841"
commit_url = "https://github.com/jovancoding/network-ai/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3"
vendored = false
host = "github"
path = "lib/approval-inbox.ts"
mode = "name"
relpath = "lib/approval-inbox.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-18"
fix_lines = { in_function = 13, in_file = 34, source_total = 77 }

[[pair.expected]]
cwe = "CWE-862"
class = "missing-authorization"
path = "lib/approval-inbox.ts"
function = "routeRequest"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-mxjx-28vx-xjjj: Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions "

[[pair]]
name = "device-builder-parse-args-9e294f7"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "esphome/device-builder"
cve = "CVE-2026-59178 GHSA-rrxg-g2pf-6hh4"
cwe = "CWE-306"
ecosystem = "pip"
published_at = "2026-09-14T18:08:57Z"
post_cutoff = true
commit = "9e294f729c3eb7334bb57b9fc49b75b728052f52"
parent = "04bcde551ad1ff3f6e94279f8aac65effcd2977e"
commit_url = "https://github.com/esphome/device-builder/commit/9e294f729c3eb7334bb57b9fc49b75b728052f52"
vendored = false
host = "github"
path = "esphome_device_builder/controllers/config/settings.py"
mode = "name"
relpath = "esphome_device_builder/controllers/config/settings.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-20"
fix_lines = { in_function = 24, in_file = 13, source_total = 108 }

[[pair.expected]]
cwe = "CWE-306"
class = "missing-authentication"
path = "esphome_device_builder/controllers/config/settings.py"
function = "parse_args"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-rrxg-g2pf-6hh4: ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade"

[[pair]]
name = "typespec-start-30d6f65"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "microsoft/typespec"
cve = "GHSA-7q9c-hpx7-9cwm"
cwe = "CWE-306"
ecosystem = "npm"
published_at = "2026-09-04T21:43:13Z"
post_cutoff = true
commit = "30d6f6598dd796e2d6aea038139d29b91e6a2da7"
parent = "156c91d401959eba1bde02142eb00b27c669e571"
commit_url = "https://github.com/microsoft/typespec/commit/30d6f6598dd796e2d6aea038139d29b91e6a2da7"
vendored = false
host = "github"
path = "packages/spector/src/server/server.ts"
mode = "name"
relpath = "packages/spector/src/server/server.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-16"
fix_lines = { in_function = 4, in_file = 9, source_total = 11 }

[[pair.expected]]
cwe = "CWE-306"
class = "missing-authentication"
path = "packages/spector/src/server/server.ts"
function = "start"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-7q9c-hpx7-9cwm: TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop"

[[pair]]
name = "tomcat-findsecurityconstraints-8bafd79"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "apache/tomcat"
cve = "CVE-2026-65182 GHSA-gcx9-497g-6cp6"
cwe = "CWE-284"
ecosystem = "maven"
published_at = "2026-08-26T00:30:52Z"
post_cutoff = true
commit = "8bafd79a3b54684e80e9cb1bafd4746aede7d3f5"
parent = "738fca57c1cb50b98536e9114ec8cb37ffab4b30"
commit_url = "https://github.com/apache/tomcat/commit/8bafd79a3b54684e80e9cb1bafd4746aede7d3f5"
vendored = false
host = "github"
path = "java/org/apache/catalina/realm/RealmBase.java"
mode = "name"
relpath = "java/org/apache/catalina/realm/RealmBase.java"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-11"
fix_lines = { in_function = 3, in_file = 10, source_total = 17 }

[[pair.expected]]
cwe = "CWE-284"
class = "access-control"
path = "java/org/apache/catalina/realm/RealmBase.java"
function = "findSecurityConstraints"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-gcx9-497g-6cp6: Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability"

[[pair]]
name = "vm2-makebuiltinsfromlegacyoptions-b0f5066"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "patriksimek/vm2"
cve = "CVE-2026-92957 GHSA-8686-vhfx-7r3j"
cwe = "CWE-284"
ecosystem = "npm"
published_at = "2026-10-01T15:36:01Z"
post_cutoff = true
commit = "b0f50662dd499ff33544bb42387958c64711af1e"
parent = "aa146a77f859325e079f3bfbfe6d8309af483daa"
commit_url = "https://github.com/patriksimek/vm2/commit/b0f50662dd499ff33544bb42387958c64711af1e"
vendored = false
host = "github"
path = "lib/builtin.js"
mode = "name"
relpath = "lib/builtin.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-08-22"
fix_lines = { in_function = 2, in_file = 7, source_total = 8 }

[[pair.expected]]
cwe = "CWE-284"
class = "access-control"
path = "lib/builtin.js"
function = "makeBuiltinsFromLegacyOptions"
mechanism = "missing_auth_guard"
family = "access_control"
evidence = "GHSA-8686-vhfx-7r3j: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process"

[[pair]]
name = "inlong-filtersensitive-ebcd6d3"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "apache/inlong"
cve = "CVE-2025-27531 GHSA-62gc-8jr5-x9pm"
cwe = "CWE-502"
ecosystem = "maven"
published_at = "2025-06-06T15:30:53Z"
post_cutoff = false
commit = "ebcd6d3230b73abdc41edb93619be2a26c9b8c97"
parent = "1183e43b442558139169ab981a7d35c60860d859"
commit_url = "https://github.com/apache/inlong/commit/ebcd6d3230b73abdc41edb93619be2a26c9b8c97"
vendored = false
host = "github"
path = "inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/util/MySQLSensitiveUrlUtils.java"
mode = "name"
relpath = "inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/util/MySQLSensitiveUrlUtils.java"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2024-12-08"
fix_lines = { in_function = 8, in_file = 15, source_total = 24 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/util/MySQLSensitiveUrlUtils.java"
function = "filterSensitive"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-62gc-8jr5-x9pm: Apache InLong Deserialization of Untrusted Data Vulnerability"

[[pair]]
name = "h2o-3-validatejdbcurl-0298ee3"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "h2oai/h2o-3"
cve = "CVE-2025-6544 GHSA-5w3j-gwgh-4rfv"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2025-09-22T18:30:34Z"
post_cutoff = false
commit = "0298ee348f5c73673b7b542158081e79605f5f25"
parent = "56fca16b30e46c0b852a2666d22e9cd7315acdfa"
commit_url = "https://github.com/h2oai/h2o-3/commit/0298ee348f5c73673b7b542158081e79605f5f25"
vendored = false
host = "github"
path = "h2o-core/src/main/java/water/jdbc/SQLManager.java"
mode = "name"
relpath = "h2o-core/src/main/java/water/jdbc/SQLManager.java"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2025-07-15"
fix_lines = { in_function = 22, in_file = 21, source_total = 23 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "h2o-core/src/main/java/water/jdbc/SQLManager.java"
function = "validateJdbcUrl"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-5w3j-gwgh-4rfv: H2O affected by a deserialization vulnerability"

[[pair]]
name = "skops-load-model-29d61ea"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "skops-dev/skops"
cve = "CVE-2025-54886 GHSA-378x-6p4f-8jgm"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2025-08-07T16:42:54Z"
post_cutoff = false
commit = "29d61ea8a92f2bde6830e8f32cc72a1a87211cda"
parent = "5c457718a67229ca92190b718bdcbfe8a16672d8"
commit_url = "https://github.com/skops-dev/skops/commit/29d61ea8a92f2bde6830e8f32cc72a1a87211cda"
vendored = false
host = "github"
path = "skops/card/_model_card.py"
mode = "name"
relpath = "skops/card/_model_card.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2025-08-06"
fix_lines = { in_function = 34, in_file = 33, source_total = 39 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "skops/card/_model_card.py"
function = "_load_model"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-378x-6p4f-8jgm: SKOPS Card.get_model happily allows arbitrary code execution"

[[pair]]
name = "picklescan-list-globals-58983e1"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "mmaitre314/picklescan"
cve = "CVE-2025-71325 GHSA-9gvj-pp9x-gcfr"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2025-08-12T00:13:55Z"
post_cutoff = false
commit = "58983e1c20973ac42f2df7ff15d7c8cd32f9b688"
parent = "2974a252df7649ca910c4d6c79afa1029ee99423"
commit_url = "https://github.com/mmaitre314/picklescan/commit/58983e1c20973ac42f2df7ff15d7c8cd32f9b688"
vendored = false
host = "github"
path = "src/picklescan/scanner.py"
mode = "name"
relpath = "src/picklescan/scanner.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2025-08-10"
fix_lines = { in_function = 5, in_file = 4, source_total = 5 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "src/picklescan/scanner.py"
function = "_list_globals"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-9gvj-pp9x-gcfr: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass"

[[pair]]
name = "sglang-deserialize-49afb3d"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "sgl-project/sglang"
cve = "CVE-2025-10164 GHSA-9w53-xr52-mwgj"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2025-09-09T21:30:26Z"
post_cutoff = false
commit = "49afb3d9d9deedf6dea3a6dd5c50e85e7d8bcb07"
parent = "f80371ff8cb7d7308aea818e54d68de464972856"
commit_url = "https://github.com/sgl-project/sglang/commit/49afb3d9d9deedf6dea3a6dd5c50e85e7d8bcb07"
vendored = false
host = "github"
path = "python/sglang/srt/utils/common.py"
mode = "name"
relpath = "python/sglang/srt/utils/common.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2025-10-24"
fix_lines = { in_function = 51, in_file = 72, source_total = 73 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "python/sglang/srt/utils/common.py"
function = "deserialize"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-9w53-xr52-mwgj: SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor"

[[pair]]
name = "pdfminer-six-load-data-b808ee0"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "pdfminer/pdfminer.six"
cve = "CVE-2025-70559 GHSA-f83h-ghpp-7wcc"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2025-11-07T23:17:05Z"
post_cutoff = false
commit = "b808ee05dd7f0c8ea8ec34bdf394d40e63501086"
parent = "51683b2528e2aa685dd8b9e61f6ccf9f76a59a62"
commit_url = "https://github.com/pdfminer/pdfminer.six/commit/b808ee05dd7f0c8ea8ec34bdf394d40e63501086"
vendored = false
host = "github"
path = "pdfminer/cmapdb.py"
mode = "name"
relpath = "pdfminer/cmapdb.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2025-11-07"
fix_lines = { in_function = 10, in_file = 8, source_total = 10 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "pdfminer/cmapdb.py"
function = "_load_data"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-f83h-ghpp-7wcc: Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc"

[[pair]]
name = "reverb-handle-9ec26f8"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "laravel/reverb"
cve = "CVE-2026-23524 GHSA-m27r-m6rx-mhm4"
cwe = "CWE-502"
ecosystem = "composer"
published_at = "2026-01-21T15:40:24Z"
post_cutoff = false
commit = "9ec26f8ffbb701f84920dd0bb9781a1797591f1a"
parent = "f19950ff01b474aec554fadcc6a3c62e726c10ae"
commit_url = "https://github.com/laravel/reverb/commit/9ec26f8ffbb701f84920dd0bb9781a1797591f1a"
vendored = false
host = "github"
path = "src/Protocols/Pusher/PusherPubSubIncomingMessageHandler.php"
mode = "name"
relpath = "src/Protocols/Pusher/PusherPubSubIncomingMessageHandler.php"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-01-06"
fix_lines = { in_function = 6, in_file = 7, source_total = 9 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "src/Protocols/Pusher/PusherPubSubIncomingMessageHandler.php"
function = "handle"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-m27r-m6rx-mhm4: Laravel Redis Horizontal Scaling Insecure Deserialization"

[[pair]]
name = "transformers-is-kernel-a7f8e7f"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "huggingface/transformers"
cve = "CVE-2026-4372 GHSA-29pf-2h5f-8g72"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2026-05-26T13:30:33Z"
post_cutoff = false
commit = "a7f8e7ff37d87d1a1a0c8cf607971c607741452f"
parent = "744639aba7811a9120e738d975ee4498dee60f92"
commit_url = "https://github.com/huggingface/transformers/commit/a7f8e7ff37d87d1a1a0c8cf607971c607741452f"
vendored = false
host = "github"
path = "src/transformers/integrations/hub_kernels.py"
mode = "name"
relpath = "src/transformers/integrations/hub_kernels.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-03-02"
fix_lines = { in_function = 19, in_file = 15, source_total = 31 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "src/transformers/integrations/hub_kernels.py"
function = "is_kernel"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-29pf-2h5f-8g72: HuggingFace transformers vulnerable to remote code execution"

[[pair]]
name = "opentelemetry-java-instrumentation-read-9cf4fba"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "open-telemetry/opentelemetry-java-instrumentation"
cve = "CVE-2026-33701 GHSA-xw7x-h9fj-p2c7"
cwe = "CWE-502"
ecosystem = "maven"
published_at = "2026-03-25T21:27:43Z"
post_cutoff = false
commit = "9cf4fbaaa9e79226142b2ed42a6f6b4ac0be2197"
parent = "778754b1f528693498a2f73aeae6018d3d456a77"
commit_url = "https://github.com/open-telemetry/opentelemetry-java-instrumentation/commit/9cf4fbaaa9e79226142b2ed42a6f6b4ac0be2197"
vendored = false
host = "github"
path = "instrumentation/rmi/javaagent/src/main/java/io/opentelemetry/javaagent/instrumentation/rmi/context/ContextPayload.java"
mode = "name"
relpath = "instrumentation/rmi/javaagent/src/main/java/io/opentelemetry/javaagent/instrumentation/rmi/context/ContextPayload.java"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-03-23"
fix_lines = { in_function = 25, in_file = 33, source_total = 46 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "instrumentation/rmi/javaagent/src/main/java/io/opentelemetry/javaagent/instrumentation/rmi/context/ContextPayload.java"
function = "read"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-xw7x-h9fj-p2c7: OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution"

[[pair]]
name = "keras-from-config-55888d3"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "keras-team/keras"
cve = "CVE-2026-12484 GHSA-v2w2-w228-c444"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2026-07-19T21:30:20Z"
post_cutoff = true
commit = "55888d3becbdbb45dc16a55b489900f911e2dde5"
parent = "5798af8d3ba329511acced3cd622e863e42fe2ec"
commit_url = "https://github.com/keras-team/keras/commit/55888d3becbdbb45dc16a55b489900f911e2dde5"
vendored = false
host = "github"
path = "keras/src/utils/torch_utils.py"
mode = "name"
relpath = "keras/src/utils/torch_utils.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-10"
fix_lines = { in_function = 12, in_file = 10, source_total = 23 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "keras/src/utils/torch_utils.py"
function = "from_config"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-v2w2-w228-c444: Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data"

[[pair]]
name = "airflow-handle-event-submit-a1ab065"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "apache/airflow"
cve = "CVE-2026-67260 GHSA-q4c3-7575-55j2"
cwe = "CWE-502"
ecosystem = "pip"
published_at = "2026-08-12T18:31:18Z"
post_cutoff = true
commit = "a1ab0653121829675ad864080d2cd9d3d1688b01"
parent = "fb459dec5072051563d1924b57fa6f85fb265381"
commit_url = "https://github.com/apache/airflow/commit/a1ab0653121829675ad864080d2cd9d3d1688b01"
vendored = false
host = "github"
path = "airflow-core/src/airflow/models/trigger.py"
mode = "name"
relpath = "airflow-core/src/airflow/models/trigger.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-08-05"
fix_lines = { in_function = 41, in_file = 82, source_total = 87 }

[[pair.expected]]
cwe = "CWE-502"
class = "insecure-deserialization"
path = "airflow-core/src/airflow/models/trigger.py"
function = "handle_event_submit"
mechanism = "source_reaches_sink"
family = "deserialization"
evidence = "GHSA-q4c3-7575-55j2: Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs"

[[pair]]
name = "sequelize-partialescape-5deadd2"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "sequelize/sequelize"
cve = "CVE-2026-69240 GHSA-v8fg-2rw7-q452"
cwe = "CWE-89"
ecosystem = "npm"
published_at = "2026-08-03T20:29:50Z"
post_cutoff = true
commit = "5deadd2410ae9136a21fb652db206d27bb715f26"
parent = "b9e71a7af57568dd85b8a2fdaac59b96ce0f0e95"
commit_url = "https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26"
vendored = false
host = "github"
path = "src/sql-string.js"
mode = "name"
relpath = "src/sql-string.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2024-10-02"
fix_lines = { in_function = 63, in_file = 62, source_total = 65 }

[[pair.expected]]
cwe = "CWE-89"
class = "sqli"
path = "src/sql-string.js"
function = "partialEscape"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-v8fg-2rw7-q452: Sequelize: SQL Injection (Oracle DB)"

[[pair]]
name = "electerm-mv-aa77881"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "electerm/electerm"
cve = "CVE-2026-49255 GHSA-v5ff-xmfp-p245"
cwe = "CWE-78"
ecosystem = "npm"
published_at = "2026-07-02T19:22:31Z"
post_cutoff = true
commit = "aa778818843b9c083bd711cd04644d102fcb5a42"
parent = "fde153d677a170c5816368f6586647f3af4ef284"
commit_url = "https://github.com/electerm/electerm/commit/aa778818843b9c083bd711cd04644d102fcb5a42"
vendored = false
host = "github"
path = "src/app/lib/fs.js"
mode = "name"
relpath = "src/app/lib/fs.js"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-05-25"
fix_lines = { in_function = 15, in_file = 47, source_total = 56 }

[[pair.expected]]
cwe = "CWE-78"
class = "command-injection"
path = "src/app/lib/fs.js"
function = "mv"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-v5ff-xmfp-p245: electerm has Command Injection in File System Operations (rmrf, mv, cp)"

[[pair]]
name = "systeminformation-checklinuxdchpinterfaces-bbfddde"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "sebhildebrandt/systeminformation"
cve = "CVE-2026-50289 GHSA-5xpp-75jx-m839"
cwe = "CWE-78"
ecosystem = "npm"
published_at = "2026-07-15T23:09:28Z"
post_cutoff = true
commit = "bbfddde48672d0ee124fefdb3cb4442fd9dd4f03"
parent = "da1cbf5eb09907cf5c3431f4c9ea441b7a227617"
commit_url = "https://github.com/sebhildebrandt/systeminformation/commit/bbfddde48672d0ee124fefdb3cb4442fd9dd4f03"
vendored = false
host = "github"
path = "lib/network.js"
mode = "name"
relpath = "lib/network.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-05-29"
fix_lines = { in_function = 4, in_file = 3, source_total = 5 }

[[pair.expected]]
cwe = "CWE-78"
class = "command-injection"
path = "lib/network.js"
function = "checkLinuxDCHPInterfaces"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-5xpp-75jx-m839: systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux"

[[pair]]
name = "prompty-buildagent-c27402d"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "microsoft/prompty"
cve = "CVE-2026-53597 GHSA-c4gh-rv8h-q9vw"
cwe = "CWE-94"
ecosystem = "npm"
published_at = "2026-07-17T19:53:34Z"
post_cutoff = true
commit = "c27402da2487075be577f06aa79df627fb9d6853"
parent = "b4fd3608116d8b1c42319d060d49eb6da85f25e7"
commit_url = "https://github.com/microsoft/prompty/commit/c27402da2487075be577f06aa79df627fb9d6853"
vendored = false
host = "github"
path = "runtime/typescript/packages/core/src/core/loader.ts"
mode = "name"
relpath = "runtime/typescript/packages/core/src/core/loader.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-06"
fix_lines = { in_function = 8, in_file = 10, source_total = 11 }

[[pair.expected]]
cwe = "CWE-94"
class = "code-injection"
path = "runtime/typescript/packages/core/src/core/loader.ts"
function = "buildAgent"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-c4gh-rv8h-q9vw: Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader"

[[pair]]
name = "datamodel-code-generator-get-field-extras-17fc235"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "koxudaxi/datamodel-code-generator"
cve = "CVE-2026-54653 GHSA-386q-5hp3-95m9"
cwe = "CWE-94"
ecosystem = "pip"
published_at = "2026-07-28T21:48:14Z"
post_cutoff = true
commit = "17fc235e234cbcfaaadef8c74cb72c9687db0d1d"
parent = "b73abb5cd703a50471b8950bbd3bd0b82ad71de7"
commit_url = "https://github.com/koxudaxi/datamodel-code-generator/commit/17fc235e234cbcfaaadef8c74cb72c9687db0d1d"
vendored = false
host = "github"
path = "src/datamodel_code_generator/parser/jsonschema.py"
mode = "name"
relpath = "src/datamodel_code_generator/parser/jsonschema.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-08"
fix_lines = { in_function = 3, in_file = 13, source_total = 13 }

[[pair.expected]]
cwe = "CWE-94"
class = "code-injection"
path = "src/datamodel_code_generator/parser/jsonschema.py"
function = "get_field_extras"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-386q-5hp3-95m9: `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field"

[[pair]]
name = "spring-data-mongodb-bindablevaluefor-24d5afc"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "spring-projects/spring-data-mongodb"
cve = "CVE-2026-41696 GHSA-hc43-m36c-8v33"
cwe = "CWE-943"
ecosystem = "maven"
published_at = "2026-06-10T00:31:51Z"
post_cutoff = true
commit = "24d5afc0c7df223150e06fce3f64c226bcc88ca2"
parent = "22136feff1554aca087508ac9a341798ca9e0316"
commit_url = "https://github.com/spring-projects/spring-data-mongodb/commit/24d5afc0c7df223150e06fce3f64c226bcc88ca2"
vendored = false
host = "github"
path = "spring-data-mongodb/src/main/java/org/springframework/data/mongodb/util/json/ParameterBindingJsonReader.java"
mode = "name"
relpath = "spring-data-mongodb/src/main/java/org/springframework/data/mongodb/util/json/ParameterBindingJsonReader.java"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-08"
fix_lines = { in_function = 22, in_file = 29, source_total = 39 }

[[pair.expected]]
cwe = "CWE-943"
class = "query-injection"
path = "spring-data-mongodb/src/main/java/org/springframework/data/mongodb/util/json/ParameterBindingJsonReader.java"
function = "bindableValueFor"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-hc43-m36c-8v33: Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods"

[[pair]]
name = "spring-ai-emitlucenestring-2b20cfc"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "spring-projects/spring-ai"
cve = "CVE-2026-47835 GHSA-cmwh-w62w-r2mf"
cwe = "CWE-943"
ecosystem = "maven"
published_at = "2026-06-15T21:30:39Z"
post_cutoff = true
commit = "2b20cfc8f478444f942d4be7a867d254441ff991"
parent = "b28642fb735e79f663aa03e25c8ad1eddcf0a5cc"
commit_url = "https://github.com/spring-projects/spring-ai/commit/2b20cfc8f478444f942d4be7a867d254441ff991"
vendored = false
host = "github"
path = "spring-ai-vector-store/src/main/java/org/springframework/ai/vectorstore/filter/converter/AbstractFilterExpressionConverter.java"
mode = "name"
relpath = "spring-ai-vector-store/src/main/java/org/springframework/ai/vectorstore/filter/converter/AbstractFilterExpressionConverter.java"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-10"
fix_lines = { in_function = 4, in_file = 4, source_total = 4 }

[[pair.expected]]
cwe = "CWE-943"
class = "query-injection"
path = "spring-ai-vector-store/src/main/java/org/springframework/ai/vectorstore/filter/converter/AbstractFilterExpressionConverter.java"
function = "emitLuceneString"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-cmwh-w62w-r2mf: Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores"

[[pair]]
name = "aws-cdk-write-baa9e1d"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "Apache-2.0"
repo = "aws/aws-cdk"
cve = "CVE-2026-13760 GHSA-vcrf-j523-4mrf"
cwe = "CWE-78"
ecosystem = "npm"
published_at = "2026-07-21T19:04:50Z"
post_cutoff = true
commit = "baa9e1dff469306cc23b8f4bd232d703f98bf68a"
parent = "e360dd9b44d2111e28cd16ac683a813f33ed5793"
commit_url = "https://github.com/aws/aws-cdk/commit/baa9e1dff469306cc23b8f4bd232d703f98bf68a"
vendored = false
host = "github"
path = "packages/aws-cdk-lib/aws-lambda-nodejs/lib/bundling.ts"
mode = "name"
relpath = "packages/aws-cdk-lib/aws-lambda-nodejs/lib/bundling.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-12"
fix_lines = { in_function = 2, in_file = 2, source_total = 4 }

[[pair.expected]]
cwe = "CWE-78"
class = "command-injection"
path = "packages/aws-cdk-lib/aws-lambda-nodejs/lib/bundling.ts"
function = "write"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-vcrf-j523-4mrf: aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling"

[[pair]]
name = "danger-js-localgetfileatsha-087a729"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "danger/danger-js"
cve = "CVE-2026-16629 GHSA-3x93-p86w-5jvh"
cwe = "CWE-77"
ecosystem = "npm"
published_at = "2026-07-23T00:31:28Z"
post_cutoff = true
commit = "087a7290264cc6fb7154ea8c2552a7b2cb8b33a3"
parent = "a9f198a96ac593c4b6968b91e4591d8931dc9861"
commit_url = "https://github.com/danger/danger-js/commit/087a7290264cc6fb7154ea8c2552a7b2cb8b33a3"
vendored = false
host = "github"
path = "source/platforms/git/localGetFileAtSHA.ts"
mode = "name"
relpath = "source/platforms/git/localGetFileAtSHA.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-16"
fix_lines = { in_function = 8, in_file = 6, source_total = 10 }

[[pair.expected]]
cwe = "CWE-77"
class = "command-injection"
path = "source/platforms/git/localGetFileAtSHA.ts"
function = "localGetFileAtSHA"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-3x93-p86w-5jvh: danger allows local OS command injection through crafted file paths"

[[pair]]
name = "argos-javascript-gitfetch-8355f3a"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "argos-ci/argos-javascript"
cve = "CVE-2026-59960 GHSA-4x45-gxvp-6283"
cwe = "CWE-78"
ecosystem = "npm"
published_at = "2026-09-10T22:34:17Z"
post_cutoff = true
commit = "8355f3af3be3f4fe361d58a688d21535cf672717"
parent = "1787fe78cba46f408493e02114150f2d73f47fa4"
commit_url = "https://github.com/argos-ci/argos-javascript/commit/8355f3af3be3f4fe361d58a688d21535cf672717"
vendored = false
host = "github"
path = "packages/core/src/ci-environment/git.ts"
mode = "name"
relpath = "packages/core/src/ci-environment/git.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-21"
fix_lines = { in_function = 12, in_file = 18, source_total = 26 }

[[pair.expected]]
cwe = "CWE-78"
class = "command-injection"
path = "packages/core/src/ci-environment/git.ts"
function = "gitFetch"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-4x45-gxvp-6283: @argos-ci/core: CI Branch Name OS Command Injection"

[[pair]]
name = "cakephp-transformfunctionexpression-138f2f6"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "cakephp/cakephp"
cve = "CVE-2026-77635 GHSA-fxf7-vhh8-7vpq"
cwe = "CWE-89"
ecosystem = "composer"
published_at = "2026-09-08T20:56:41Z"
post_cutoff = true
commit = "138f2f61486532c29ee4d106da2a9848c1ff1ab3"
parent = "ab608711674ac662af7315c5cdf1e0fbe2000e45"
commit_url = "https://github.com/cakephp/cakephp/commit/138f2f61486532c29ee4d106da2a9848c1ff1ab3"
vendored = false
host = "github"
path = "src/Database/Driver/Postgres.php"
mode = "name"
relpath = "src/Database/Driver/Postgres.php"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-09"
fix_lines = { in_function = 4, in_file = 3, source_total = 4 }

[[pair.expected]]
cwe = "CWE-89"
class = "sqli"
path = "src/Database/Driver/Postgres.php"
function = "_transformFunctionExpression"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-fxf7-vhh8-7vpq: CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver"

[[pair]]
name = "orval-getroutepath-8ef1bfd"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "orval-labs/orval"
cve = "CVE-2026-71867 GHSA-2w86-xfrc-g85r"
cwe = "CWE-89"
ecosystem = "npm"
published_at = "2026-09-03T18:26:12Z"
post_cutoff = true
commit = "8ef1bfdf3f9bcaf9dabfbe2e42887f1c0e159ab6"
parent = "c082bb4aff4f9aaee196a1ca948492f0e28d6e79"
commit_url = "https://github.com/orval-labs/orval/commit/8ef1bfdf3f9bcaf9dabfbe2e42887f1c0e159ab6"
vendored = false
host = "github"
path = "packages/core/src/getters/route.ts"
mode = "name"
relpath = "packages/core/src/getters/route.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-12"
fix_lines = { in_function = 29, in_file = 45, source_total = 107 }

[[pair.expected]]
cwe = "CWE-89"
class = "sqli"
path = "packages/core/src/getters/route.ts"
function = "getRoutePath"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-2w86-xfrc-g85r: Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator"

[[pair]]
name = "velocity-js-isblockedpathkey-f8e47a6"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "shepherdwind/velocity.js"
cve = "CVE-2026-73649 GHSA-7gfh-x38p-prh3"
cwe = "CWE-94"
ecosystem = "npm"
published_at = "2026-07-24T16:21:22Z"
post_cutoff = true
commit = "f8e47a6c4607249b9c967d3a1ced959b4dd64dba"
parent = "4cbc7f102c1c7c3e938883a11789231c2d9e6eac"
commit_url = "https://github.com/shepherdwind/velocity.js/commit/f8e47a6c4607249b9c967d3a1ced959b4dd64dba"
vendored = false
host = "github"
path = "src/compile/set.ts"
mode = "name"
relpath = "src/compile/set.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-14"
fix_lines = { in_function = 15, in_file = 34, source_total = 100 }

[[pair.expected]]
cwe = "CWE-94"
class = "code-injection"
path = "src/compile/set.ts"
function = "isBlockedPathKey"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-7gfh-x38p-prh3: Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)"

[[pair]]
name = "jsonata-evaluategroupexpression-4b217d5"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "jsonata-js/jsonata"
cve = "CVE-2026-77413 GHSA-8gq3-vp5j-2grp"
cwe = "CWE-94"
ecosystem = "npm"
published_at = "2026-08-21T20:57:07Z"
post_cutoff = true
commit = "4b217d514376e30cba278941298d7ba97c4a6c6e"
parent = "f09df8416eab8ff44926fc6527c80fb8701de159"
commit_url = "https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e"
vendored = false
host = "github"
path = "src/jsonata.js"
mode = "name"
relpath = "src/jsonata.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-15"
fix_lines = { in_function = 11, in_file = 26, source_total = 67 }

[[pair.expected]]
cwe = "CWE-94"
class = "code-injection"
path = "src/jsonata.js"
function = "evaluateGroupExpression"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-8gq3-vp5j-2grp: JSONata: Arbitrary Code Execution via crafted JSONata expressions"

[[pair]]
name = "nuxt-getislandcontext-5b60017"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "nuxt/nuxt"
cve = "CVE-2026-71320 GHSA-9473-5f9j-94wq"
cwe = "CWE-94"
ecosystem = "npm"
published_at = "2026-08-05T21:29:55Z"
post_cutoff = true
commit = "5b60017f7f1d5e9384cadf1d6c580b99d583c418"
parent = "668cdfdfda41849ed11c1ee5e2067a11fc103b22"
commit_url = "https://github.com/nuxt/nuxt/commit/5b60017f7f1d5e9384cadf1d6c580b99d583c418"
vendored = false
host = "github"
path = "packages/nitro-server/src/runtime/handlers/island.ts"
mode = "name"
relpath = "packages/nitro-server/src/runtime/handlers/island.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-27"
fix_lines = { in_function = 12, in_file = 14, source_total = 43 }

[[pair.expected]]
cwe = "CWE-94"
class = "code-injection"
path = "packages/nitro-server/src/runtime/handlers/island.ts"
function = "getIslandContext"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-9473-5f9j-94wq: Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props"

[[pair]]
name = "mermaid-addnamespace-12d472c"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "mermaid-js/mermaid"
cve = "CVE-2026-50159 GHSA-6x64-9x62-f2gx"
cwe = "CWE-94"
ecosystem = "npm"
published_at = "2026-08-06T19:55:31Z"
post_cutoff = true
commit = "12d472c9ed43f94814b110da8d7a9ae6dd5266ed"
parent = "2cd6dcf735533b323507e3e889ffdea870540b43"
commit_url = "https://github.com/mermaid-js/mermaid/commit/12d472c9ed43f94814b110da8d7a9ae6dd5266ed"
vendored = false
host = "github"
path = "packages/mermaid/src/mermaidAPI.ts"
mode = "name"
relpath = "packages/mermaid/src/mermaidAPI.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-04"
fix_lines = { in_function = 32, in_file = 31, source_total = 34 }

[[pair.expected]]
cwe = "CWE-94"
class = "code-injection"
path = "packages/mermaid/src/mermaidAPI.ts"
function = "addNamespace"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-6x64-9x62-f2gx: Mermaid allows CSS injection applying to sibling elements of the diagram"

[[pair]]
name = "php-codesniffer-getblamecontent-7a3a6bb"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "BSD-3-Clause"
repo = "phpcsstandards/php_codesniffer"
cve = "CVE-2026-67434 GHSA-hmqg-cxww-wqhq"
cwe = "CWE-78"
ecosystem = "composer"
published_at = "2026-08-06T21:31:34Z"
post_cutoff = true
commit = "7a3a6bbf153a03fa3a9413afc60bded6b764e76b"
parent = "b5ce04f12210b2fcb91fbcb9780d8fb0ffd07bea"
commit_url = "https://github.com/phpcsstandards/php_codesniffer/commit/7a3a6bbf153a03fa3a9413afc60bded6b764e76b"
vendored = false
host = "github"
path = "src/Reports/Gitblame.php"
mode = "name"
relpath = "src/Reports/Gitblame.php"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-08-05"
fix_lines = { in_function = 2, in_file = 1, source_total = 6 }

[[pair.expected]]
cwe = "CWE-78"
class = "command-injection"
path = "src/Reports/Gitblame.php"
function = "getBlameContent"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-hmqg-cxww-wqhq: PHP_CodeSniffer gitblame report command injection via crafted filename"

[[pair]]
name = "xmldom-serializetostring-1cde3e3"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "xmldom/xmldom"
cve = "CVE-2026-83616 GHSA-c7q8-3ch8-vqpv"
cwe = "CWE-91"
ecosystem = "npm"
published_at = "2026-09-08T21:03:28Z"
post_cutoff = true
commit = "1cde3e31a07c41c87cfd368d6946aa477f16b4f9"
parent = "57aec90ac57b4408ae7c5d1746bf2a693b5ed90e"
commit_url = "https://github.com/xmldom/xmldom/commit/1cde3e31a07c41c87cfd368d6946aa477f16b4f9"
vendored = false
host = "github"
path = "lib/dom.js"
mode = "name"
relpath = "lib/dom.js"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-21"
fix_lines = { in_function = 7, in_file = 12, source_total = 24 }

[[pair.expected]]
cwe = "CWE-91"
class = "xml-injection"
path = "lib/dom.js"
function = "serializeToString"
mechanism = "source_reaches_sink"
family = "injection"
evidence = "GHSA-c7q8-3ch8-vqpv: xmldom: Processing Instruction Target Injection Bypasses requireWellFormed"

[[pair]]
name = "trix-fromjson-9c0a993"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "basecamp/trix"
cve = "CVE-2026-73428 GHSA-53g2-mvcc-q9x3"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-07-24T16:18:01Z"
post_cutoff = true
commit = "9c0a993d9fc2ffe9d56b013b030bc238f9c0557c"
parent = "e62fcc3b5872a310a79cecb47472bd16bf6499ad"
commit_url = "https://github.com/basecamp/trix/commit/9c0a993d9fc2ffe9d56b013b030bc238f9c0557c"
vendored = false
host = "github"
path = "src/trix/models/string_piece.js"
mode = "name"
relpath = "src/trix/models/string_piece.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-03-26"
fix_lines = { in_function = 6, in_file = 7, source_total = 16 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "src/trix/models/string_piece.js"
function = "fromJSON"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-53g2-mvcc-q9x3: Trix: Stored XSS via HTMLParser attribute injection on paste"

[[pair]]
name = "oauthlib-prepare-token-revocation-request-c888359"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "BSD-3-Clause"
repo = "oauthlib/oauthlib"
cve = "CVE-2026-49264 GHSA-hj66-6f7g-4r5v"
cwe = "CWE-79"
ecosystem = "pip"
published_at = "2026-09-29T17:53:41Z"
post_cutoff = true
commit = "c888359f3c42bec235b2c5caab2069c9ed62457c"
parent = "b3f9edffed6b370e3eb92721cea0da22ec7e18b9"
commit_url = "https://github.com/oauthlib/oauthlib/commit/c888359f3c42bec235b2c5caab2069c9ed62457c"
vendored = false
host = "github"
path = "oauthlib/oauth2/rfc6749/clients/base.py"
mode = "name"
relpath = "oauthlib/oauth2/rfc6749/clients/base.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-05-22"
fix_lines = { in_function = 19, in_file = 22, source_total = 43 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "oauthlib/oauth2/rfc6749/clients/base.py"
function = "prepare_token_revocation_request"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-hj66-6f7g-4r5v: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation"

[[pair]]
name = "suneditor-submitsrc-9d43a5e"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "jihong88/suneditor"
cve = "CVE-2026-54606 GHSA-w93q-cq9w-58p7"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-08-26T15:26:24Z"
post_cutoff = true
commit = "9d43a5e082101d2d6475cba86e0d58d7c2cf6677"
parent = "ab8427af1a0607665b0088e4c93bf453083d6a13"
commit_url = "https://github.com/jihong88/suneditor/commit/9d43a5e082101d2d6475cba86e0d58d7c2cf6677"
vendored = false
host = "github"
path = "src/plugins/modal/embed.js"
mode = "name"
relpath = "src/plugins/modal/embed.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-05-30"
fix_lines = { in_function = 10, in_file = 41, source_total = 42 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "src/plugins/modal/embed.js"
function = "submitSRC"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-w93q-cq9w-58p7: SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed"

[[pair]]
name = "mathlive-atomtomathml-5fe1c46"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "arnog/mathlive"
cve = "CVE-2026-54705 GHSA-fm7p-gw32-828p"
cwe = "CWE-116"
ecosystem = "npm"
published_at = "2026-07-29T17:21:26Z"
post_cutoff = true
commit = "5fe1c46153883f9ec0249a5c8c34e64aaae9cfb8"
parent = "25db1a836f35e9fc8973599e7cb19be1e4d1b9c7"
commit_url = "https://github.com/arnog/mathlive/commit/5fe1c46153883f9ec0249a5c8c34e64aaae9cfb8"
vendored = false
host = "github"
path = "src/formats/atom-to-math-ml.ts"
mode = "name"
relpath = "src/formats/atom-to-math-ml.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-09"
fix_lines = { in_function = 51, in_file = 37, source_total = 74 }

[[pair.expected]]
cwe = "CWE-116"
class = "improper-encoding"
path = "src/formats/atom-to-math-ml.ts"
function = "atomToMathML"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-fm7p-gw32-828p: mathlive's Lack of Escaping of HTML allows for XSS"

[[pair]]
name = "genql-comment-2dbc80f"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "remorses/genql"
cve = "CVE-2026-63397 GHSA-w757-xvvv-vgfw"
cwe = "CWE-116"
ecosystem = "npm"
published_at = "2026-07-16T21:30:38Z"
post_cutoff = true
commit = "2dbc80ffb767ee58e6b27d9d81d58fa1ee8bea28"
parent = "3b281a90f46a481fabf5aafd13208f426db45265"
commit_url = "https://github.com/remorses/genql/commit/2dbc80ffb767ee58e6b27d9d81d58fa1ee8bea28"
vendored = false
host = "github"
path = "cli/src/render/common/comment.ts"
mode = "name"
relpath = "cli/src/render/common/comment.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-11"
fix_lines = { in_function = 4, in_file = 4, source_total = 6 }

[[pair.expected]]
cwe = "CWE-116"
class = "improper-encoding"
path = "cli/src/render/common/comment.ts"
function = "comment"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-w757-xvvv-vgfw: Genql: inject arbitrary JavaScript or TypeScript via a GraphQL schema"

[[pair]]
name = "angular-visitelementlike-417a407"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "angular/angular"
cve = "CVE-2026-69151 GHSA-jj27-h5hq-8x99"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-08-03T16:23:40Z"
post_cutoff = true
commit = "417a4071a776464d549509ed3aec121dbd2fda5e"
parent = "2112edefe1dd24d322c247ff5354dcdb6e9c6c98"
commit_url = "https://github.com/angular/angular/commit/417a4071a776464d549509ed3aec121dbd2fda5e"
vendored = false
host = "github"
path = "packages/compiler/src/render3/view/i18n/meta.ts"
mode = "name"
relpath = "packages/compiler/src/render3/view/i18n/meta.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-15"
fix_lines = { in_function = 2, in_file = 12, source_total = 13 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "packages/compiler/src/render3/view/i18n/meta.ts"
function = "_visitElementLike"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-jj27-h5hq-8x99: Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes"

[[pair]]
name = "cyberchef-objtotable-85db3be"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "Apache-2.0"
repo = "gchq/cyberchef"
cve = "CVE-2026-57439 GHSA-fx6f-382r-j72c"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-09-24T19:24:30Z"
post_cutoff = true
commit = "85db3be5d0096859b810f0e8d3e151d5dc9b948f"
parent = "50a7319b69ff6fd4473c8648fcaac1eeb3027dac"
commit_url = "https://github.com/gchq/cyberchef/commit/85db3be5d0096859b810f0e8d3e151d5dc9b948f"
vendored = false
host = "github"
path = "src/core/lib/Protocol.mjs"
mode = "name"
relpath = "src/core/lib/Protocol.mjs"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-17"
fix_lines = { in_function = 13, in_file = 8, source_total = 20 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "src/core/lib/Protocol.mjs"
function = "objToTable"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-fx6f-382r-j72c: CyberChef: Prototype pollution in Series Chart operation"

[[pair]]
name = "mdc-isanchorlinkallowed-61d636c"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "nuxt-content/mdc"
cve = "CVE-2026-63671 GHSA-mxm6-v9r6-r94c"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-09-16T22:14:01Z"
post_cutoff = true
commit = "61d636c2983f021288e4fc5c4006733b38cf0d53"
parent = "d6e5fc6001085f2d34b905ba0407a2f7392de388"
commit_url = "https://github.com/nuxt-content/mdc/commit/61d636c2983f021288e4fc5c4006733b38cf0d53"
vendored = false
host = "github"
path = "src/runtime/parser/utils/props.ts"
mode = "name"
relpath = "src/runtime/parser/utils/props.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-21"
fix_lines = { in_function = 2, in_file = 2, source_total = 4 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "src/runtime/parser/utils/props.ts"
function = "isAnchorLinkAllowed"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-mxm6-v9r6-r94c: @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration"

[[pair]]
name = "node-xhtml-purifier-node-21d461a"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "cstigler/node-xhtml-purifier"
cve = "CVE-2026-61784 GHSA-j8r4-32c5-33rc"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-09-24T19:33:23Z"
post_cutoff = true
commit = "21d461ad23e7bc9b3073693d5b51b9b8662044d3"
parent = "9370430332aa1398cc3f5abae5f335d1d8da032b"
commit_url = "https://github.com/cstigler/node-xhtml-purifier/commit/21d461ad23e7bc9b3073693d5b51b9b8662044d3"
vendored = false
host = "github"
path = "XHTMLPurifier.js"
mode = "name"
relpath = "XHTMLPurifier.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-23"
fix_lines = { in_function = 11, in_file = 10, source_total = 21 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "XHTMLPurifier.js"
function = "Node"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-j8r4-32c5-33rc: xhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSS"

[[pair]]
name = "orpc-init-daabded"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "middleapi/orpc"
cve = "CVE-2026-77360 GHSA-j9v4-rhgr-4m5f"
cwe = "CWE-113"
ecosystem = "npm"
published_at = "2026-09-17T14:52:37Z"
post_cutoff = true
commit = "daabded122a89d323357c4c401e879701864cb2f"
parent = "669f0b59cfc31efd6ea50bb50c320de2f3be2300"
commit_url = "https://github.com/middleapi/orpc/commit/daabded122a89d323357c4c401e879701864cb2f"
vendored = false
host = "github"
path = "packages/server/src/plugins/cors.ts"
mode = "name"
relpath = "packages/server/src/plugins/cors.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-12"
fix_lines = { in_function = 5, in_file = 4, source_total = 5 }

[[pair.expected]]
cwe = "CWE-113"
class = "header-injection"
path = "packages/server/src/plugins/cors.ts"
function = "init"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-j9v4-rhgr-4m5f: oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass"

[[pair]]
name = "mkdocs-material-mountsearchsuggest-52fb6be"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "squidfunk/mkdocs-material"
cve = "CVE-2026-73295 GHSA-xvg9-69gf-fjrf"
cwe = "CWE-79"
ecosystem = "pip"
published_at = "2026-09-03T19:52:32Z"
post_cutoff = true
commit = "52fb6be8aafe326419f34dc94d3211e7bbfbfb25"
parent = "901e6335cc80b0f12e46a1e34bd85e983dd78a6e"
commit_url = "https://github.com/squidfunk/mkdocs-material/commit/52fb6be8aafe326419f34dc94d3211e7bbfbfb25"
vendored = false
host = "github"
path = "src/templates/assets/javascripts/components/search/suggest/index.ts"
mode = "name"
relpath = "src/templates/assets/javascripts/components/search/suggest/index.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-17"
fix_lines = { in_function = 5, in_file = 4, source_total = 9 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "src/templates/assets/javascripts/components/search/suggest/index.ts"
function = "mountSearchSuggest"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-xvg9-69gf-fjrf: Material for MkDocs: DOM XSS in search suggestions via query parameter"

[[pair]]
name = "jodit-isremovablenode-49a31f4"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "xdan/jodit"
cve = "CVE-2026-65841 GHSA-45qg-252v-3f7p"
cwe = "CWE-80"
ecosystem = "npm"
published_at = "2026-07-31T19:15:57Z"
post_cutoff = true
commit = "49a31f451f6b686f5610022a1d4406ee85138dc5"
parent = "964a264f5a182d18143ac6ad9fbed1608c6d489c"
commit_url = "https://github.com/xdan/jodit/commit/49a31f451f6b686f5610022a1d4406ee85138dc5"
vendored = false
host = "github"
path = "src/plugins/clean-html/helpers/visitor/filters/try-remove-node.ts"
mode = "name"
relpath = "src/plugins/clean-html/helpers/visitor/filters/try-remove-node.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-21"
fix_lines = { in_function = 7, in_file = 11, source_total = 17 }

[[pair.expected]]
cwe = "CWE-80"
class = "xss"
path = "src/plugins/clean-html/helpers/visitor/filters/try-remove-node.ts"
function = "isRemovableNode"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-45qg-252v-3f7p: Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization"

[[pair]]
name = "prowler-transform-6db407e"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "prowler-cloud/prowler"
cve = "CVE-2026-73262 GHSA-c2jg-2778-ggm4"
cwe = "CWE-79"
ecosystem = "pip"
published_at = "2026-09-08T18:09:25Z"
post_cutoff = true
commit = "6db407ed3c17d4c73a8f619fdb30580c8465027f"
parent = "0b98a34687e05016ee3327146ca0723661d02364"
commit_url = "https://github.com/prowler-cloud/prowler/commit/6db407ed3c17d4c73a8f619fdb30580c8465027f"
vendored = false
host = "github"
path = "prowler/lib/outputs/html/html.py"
mode = "name"
relpath = "prowler/lib/outputs/html/html.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-30"
fix_lines = { in_function = 20, in_file = 40, source_total = 51 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "prowler/lib/outputs/html/html.py"
function = "transform"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-c2jg-2778-ggm4: Prowler: Stored XSS in HTML reports through unescaped cloud resource tags"

[[pair]]
name = "commonmark-parseattributes-dfcdf45"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "BSD-3-Clause"
repo = "thephpleague/commonmark"
cve = "GHSA-f8fg-pg57-v4j8"
cwe = "CWE-79"
ecosystem = "composer"
published_at = "2026-09-01T20:18:29Z"
post_cutoff = true
commit = "dfcdf4554c16aa37c15e3a5ee3243ee26147c239"
parent = "f966b17a27c1c7cf132c6c2dfe7465accd4472fe"
commit_url = "https://github.com/thephpleague/commonmark/commit/dfcdf4554c16aa37c15e3a5ee3243ee26147c239"
vendored = false
host = "github"
path = "src/Extension/Attributes/Util/AttributesHelper.php"
mode = "name"
relpath = "src/Extension/Attributes/Util/AttributesHelper.php"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-08"
fix_lines = { in_function = 8, in_file = 20, source_total = 25 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "src/Extension/Attributes/Util/AttributesHelper.php"
function = "parseAttributes"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-f8fg-pg57-v4j8: league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed"

[[pair]]
name = "svgo-fn-3db3ef3"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "svg/svgo"
cve = "CVE-2026-84370 GHSA-w27v-7q3p-w38r"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-09-08T21:20:28Z"
post_cutoff = true
commit = "3db3ef33e409a0bc0fdaf255e46c908b00e93bc2"
parent = "4e9b9aed2a4607cf28025871151421d5bfe86484"
commit_url = "https://github.com/svg/svgo/commit/3db3ef33e409a0bc0fdaf255e46c908b00e93bc2"
vendored = false
host = "github"
path = "plugins/removeScripts.js"
mode = "name"
relpath = "plugins/removeScripts.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-08-24"
fix_lines = { in_function = 9, in_file = 10, source_total = 18 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "plugins/removeScripts.js"
function = "fn"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-w27v-7q3p-w38r: SVGO: removeScripts allows executable links through namespace and control-character bypasses"

[[pair]]
name = "tiptap-mergeattributes-01d7af8"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "ueberdosis/tiptap"
cve = "GHSA-cp6q-959q-f8rh"
cwe = "CWE-79"
ecosystem = "npm"
published_at = "2026-09-02T14:44:39Z"
post_cutoff = true
commit = "01d7af8c983ee5954c63734f4fa46cb23ae3246d"
parent = "98b469dbb7fb51e4c306dc2860355307801e8897"
commit_url = "https://github.com/ueberdosis/tiptap/commit/01d7af8c983ee5954c63734f4fa46cb23ae3246d"
vendored = false
host = "github"
path = "packages/core/src/utilities/mergeAttributes.ts"
mode = "name"
relpath = "packages/core/src/utilities/mergeAttributes.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-26"
fix_lines = { in_function = 13, in_file = 12, source_total = 12 }

[[pair.expected]]
cwe = "CWE-79"
class = "xss"
path = "packages/core/src/utilities/mergeAttributes.ts"
function = "mergeAttributes"
mechanism = "source_reaches_sink"
family = "output_encoding"
evidence = "GHSA-cp6q-959q-f8rh: Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes"

[[pair]]
name = "nogginlessdom-matchfilesnapshot-785e6ac"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "asymmetric-effort/nogginlessdom"
cve = "GHSA-322x-v876-g883"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-07-02T20:19:20Z"
post_cutoff = true
commit = "785e6ac6e124d1a89b3ccf40bbd75fc8e4cb215d"
parent = "7cd241350fb7669b006fed46b81436925d1bb55c"
commit_url = "https://github.com/asymmetric-effort/nogginlessdom/commit/785e6ac6e124d1a89b3ccf40bbd75fc8e4cb215d"
vendored = false
host = "github"
path = "src/assertions/snapshots.ts"
mode = "name"
relpath = "src/assertions/snapshots.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-05-29"
fix_lines = { in_function = 21, in_file = 18, source_total = 24 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "src/assertions/snapshots.ts"
function = "matchFileSnapshot"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-322x-v876-g883: @asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write"

[[pair]]
name = "gradio-preprocess-97d541f"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "gradio-app/gradio"
cve = "CVE-2026-49119 GHSA-j36p-7w88-g82j"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-07-01T21:36:18Z"
post_cutoff = true
commit = "97d541f3d5fd05b2587a69ecc94b68fe5d2d7004"
parent = "0d670adf41a0b510f7fd745495dce1664d38f0e5"
commit_url = "https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004"
vendored = false
host = "github"
path = "gradio/components/file_explorer.py"
mode = "name"
relpath = "gradio/components/file_explorer.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-05-31"
fix_lines = { in_function = 4, in_file = 2, source_total = 4 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "gradio/components/file_explorer.py"
function = "preprocess"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-j36p-7w88-g82j:  Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks"

[[pair]]
name = "gemini-bridge-resolve-path-8f3b85a"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "elyin/gemini-bridge"
cve = "CVE-2026-54785 GHSA-c5px-58j2-7fqp"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-07-31T22:31:20Z"
post_cutoff = true
commit = "8f3b85afd02b692c4bc974b5176e12fb277ea801"
parent = "bb3ad9e44dba04092abc2e2a8af83223f10402db"
commit_url = "https://github.com/elyin/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801"
vendored = false
host = "github"
path = "src/mcp_server.py"
mode = "name"
relpath = "src/mcp_server.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-09"
fix_lines = { in_function = 17, in_file = 25, source_total = 35 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "src/mcp_server.py"
function = "_resolve_path"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-c5px-58j2-7fqp: gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode"

[[pair]]
name = "libreoffice-convert-convertwithoptions-b78f17d"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "elwerene/libreoffice-convert"
cve = "CVE-2026-54732 GHSA-gmxc-r82q-347r"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-08-27T17:23:16Z"
post_cutoff = true
commit = "b78f17df9b9183bd503fc4635fc8b3df6705047b"
parent = "b358581adf6310b519841b275559b201bd4009f1"
commit_url = "https://github.com/elwerene/libreoffice-convert/commit/b78f17df9b9183bd503fc4635fc8b3df6705047b"
vendored = false
host = "github"
path = "index.js"
mode = "name"
relpath = "index.js"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-09"
fix_lines = { in_function = 2, in_file = 1, source_total = 2 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "index.js"
function = "convertWithOptions"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-gmxc-r82q-347r: libreoffice-convert vulnerable to path traversal / arbitrary file write"

[[pair]]
name = "atomic-agents-stack-do-get-ec474f4"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "dep0we/atomic-agents-stack"
cve = "GHSA-rm43-82j9-r4mj"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-08-13T14:17:13Z"
post_cutoff = true
commit = "ec474f458122c5c0ca718d0df3078c8080338b2c"
parent = "da861310c27c87e1a0187e71ea7ff53817e54648"
commit_url = "https://github.com/dep0we/atomic-agents-stack/commit/ec474f458122c5c0ca718d0df3078c8080338b2c"
vendored = false
host = "github"
path = "atomic_agents/dashboard/serve.py"
mode = "name"
relpath = "atomic_agents/dashboard/serve.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-10"
fix_lines = { in_function = 34, in_file = 60, source_total = 80 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "atomic_agents/dashboard/serve.py"
function = "do_GET"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-rm43-82j9-r4mj: atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read"

[[pair]]
name = "browse-mcp-downloadurl-5352a4a"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "that1drifter/browse-mcp"
cve = "CVE-2026-55557 GHSA-m9mq-7m7q-xc6p"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-08-25T16:28:32Z"
post_cutoff = true
commit = "5352a4a56f626254b445bfa07e4bb48c5aad15c1"
parent = "b106ffe0fcf2c46b9a23bfefd990ef8618dcc0c2"
commit_url = "https://github.com/that1drifter/browse-mcp/commit/5352a4a56f626254b445bfa07e4bb48c5aad15c1"
vendored = false
host = "github"
path = "src/download.ts"
mode = "name"
relpath = "src/download.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-13"
fix_lines = { in_function = 19, in_file = 21, source_total = 87 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "src/download.ts"
function = "downloadUrl"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-m9mq-7m7q-xc6p: browse-mcp has an arbitrary file write via unconfined download and state paths"

[[pair]]
name = "langchain-nvidia-url-to-b64-string-b483c7c"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "langchain-ai/langchain-nvidia"
cve = "GHSA-g28h-2cmm-rj9x"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-09-24T19:25:36Z"
post_cutoff = true
commit = "b483c7cad07dd9d5fd0fee2668238c4a08825d86"
parent = "7ebc4cb23a756cd54931b6deb8c6f0450f32ff02"
commit_url = "https://github.com/langchain-ai/langchain-nvidia/commit/b483c7cad07dd9d5fd0fee2668238c4a08825d86"
vendored = false
host = "github"
path = "libs/ai-endpoints/langchain_nvidia_ai_endpoints/_utils.py"
mode = "name"
relpath = "libs/ai-endpoints/langchain_nvidia_ai_endpoints/_utils.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-23"
fix_lines = { in_function = 14, in_file = 15, source_total = 23 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "libs/ai-endpoints/langchain_nvidia_ai_endpoints/_utils.py"
function = "_url_to_b64_string"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs"

[[pair]]
name = "redocly-cli-iteratepathitems-5041204"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "redocly/redocly-cli"
cve = "CVE-2026-63225 GHSA-657c-g7qc-r9j2"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-09-17T14:58:50Z"
post_cutoff = true
commit = "504120419a72b5c684471478337ee3b45d8bfad3"
parent = "e6baf41b436380f613a70e18e2fae9e42bb0a276"
commit_url = "https://github.com/redocly/redocly-cli/commit/504120419a72b5c684471478337ee3b45d8bfad3"
vendored = false
host = "github"
path = "packages/cli/src/commands/split/index.ts"
mode = "name"
relpath = "packages/cli/src/commands/split/index.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-06-30"
fix_lines = { in_function = 6, in_file = 13, source_total = 13 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "packages/cli/src/commands/split/index.ts"
function = "iteratePathItems"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-657c-g7qc-r9j2: Redocly CLI: Path traversal when using `split` command"

[[pair]]
name = "pip-filename-10dfb6b"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "pypa/pip"
cve = "CVE-2026-13346 GHSA-qwm4-qh6w-59xr"
cwe = "CWE-36"
ecosystem = "pip"
published_at = "2026-07-29T21:30:59Z"
post_cutoff = true
commit = "10dfb6b9005484578b386f64b9f36982e3dc6679"
parent = "ba52753ecf1803e5b6b5dfb2782835266a71c470"
commit_url = "https://github.com/pypa/pip/commit/10dfb6b9005484578b386f64b9f36982e3dc6679"
vendored = false
host = "github"
path = "src/pip/_internal/models/link.py"
mode = "name"
relpath = "src/pip/_internal/models/link.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-01"
fix_lines = { in_function = 12, in_file = 55, source_total = 89 }

[[pair.expected]]
cwe = "CWE-36"
class = "path-traversal"
path = "src/pip/_internal/models/link.py"
function = "filename"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-qwm4-qh6w-59xr: pip would incorrectly handle doubly-encoded package URLs from indexes"

[[pair]]
name = "lib-get-db-path-d665042"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Unlicense"
repo = "linuxfabrik/lib"
cve = "CVE-2026-73974 GHSA-rh9c-rqvg-f7pr"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-08-18T21:18:59Z"
post_cutoff = true
commit = "d665042c55fae83a295ebc0023e8b77f6c473a28"
parent = "07ba0bd64df1ba8335b163340f6049d49273c28c"
commit_url = "https://github.com/linuxfabrik/lib/commit/d665042c55fae83a295ebc0023e8b77f6c473a28"
vendored = false
host = "github"
path = "db_sqlite.py"
mode = "name"
relpath = "db_sqlite.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-08"
fix_lines = { in_function = 7, in_file = 6, source_total = 54 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "db_sqlite.py"
function = "get_db_path"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-rh9c-rqvg-f7pr: linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)"

[[pair]]
name = "blender-mcp-download-polyhaven-asset-30a3308"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "ahujasid/blender-mcp"
cve = "CVE-2026-66004 GHSA-4h8q-hh2j-755w"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-07-24T15:33:04Z"
post_cutoff = true
commit = "30a3308446cd8f81a9446e5a2ed657c0d8d86072"
parent = "584e892695deb28d8f09b258db981006bbb1b229"
commit_url = "https://github.com/ahujasid/blender-mcp/commit/30a3308446cd8f81a9446e5a2ed657c0d8d86072"
vendored = false
host = "github"
path = "addon.py"
mode = "name"
relpath = "addon.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-20"
fix_lines = { in_function = 10, in_file = 15, source_total = 16 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "addon.py"
function = "download_polyhaven_asset"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-4h8q-hh2j-755w: BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes"

[[pair]]
name = "datasets-set-feature-f989ef9"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "huggingface/datasets"
cve = "CVE-2026-66007 GHSA-379c-qx7v-6h59"
cwe = "CWE-22"
ecosystem = "pip"
published_at = "2026-07-24T15:33:03Z"
post_cutoff = true
commit = "f989ef9b4cc6c0039a7a82458eebca49e2b58b4b"
parent = "959825da1fcb58ec0151e7fa51628e4bc1bb60ca"
commit_url = "https://github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4b"
vendored = false
host = "github"
path = "src/datasets/packaged_modules/folder_based_builder/folder_based_builder.py"
mode = "name"
relpath = "src/datasets/packaged_modules/folder_based_builder/folder_based_builder.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-23"
fix_lines = { in_function = 18, in_file = 29, source_total = 29 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "src/datasets/packaged_modules/folder_based_builder/folder_based_builder.py"
function = "set_feature"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-379c-qx7v-6h59: Hugging Face Datasets folder-based builders allow path traversal through file_name metadata"

[[pair]]
name = "postcss-loadfile-7beca13"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "postcss/postcss"
cve = "CVE-2026-69153 GHSA-fxqj-rqcc-2cmp"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-08-03T17:11:39Z"
post_cutoff = true
commit = "7beca139e70f9075c6b19700fcb00dd8033e5da8"
parent = "decea51421682341401575b3740709fda0e12930"
commit_url = "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"
vendored = false
host = "github"
path = "lib/previous-map.js"
mode = "name"
relpath = "lib/previous-map.js"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-24"
fix_lines = { in_function = 15, in_file = 15, source_total = 16 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "lib/previous-map.js"
function = "loadFile"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-fxqj-rqcc-2cmp: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset"

[[pair]]
name = "vitest-configureserver-51edf2b"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "vitest-dev/vitest"
cve = "CVE-2026-84373 GHSA-82fw-gwwq-j7x9"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-09-08T20:46:45Z"
post_cutoff = true
commit = "51edf2b072902aec6d30c90ebaafd8f121c6f9d8"
parent = "9851dbc41c286a30abfb6b29cce65f3e5b7b40a1"
commit_url = "https://github.com/vitest-dev/vitest/commit/51edf2b072902aec6d30c90ebaafd8f121c6f9d8"
vendored = false
host = "github"
path = "packages/mocker/src/node/interceptorPlugin.ts"
mode = "name"
relpath = "packages/mocker/src/node/interceptorPlugin.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-08-17"
fix_lines = { in_function = 13, in_file = 19, source_total = 25 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "packages/mocker/src/node/interceptorPlugin.ts"
function = "configureServer"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-82fw-gwwq-j7x9: Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock"

[[pair]]
name = "next-js-getfilepath-968b9fc"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "vercel/next.js"
cve = "CVE-2026-75604 GHSA-p293-qw3h-jr36"
cwe = "CWE-22"
ecosystem = "npm"
published_at = "2026-09-08T20:51:40Z"
post_cutoff = true
commit = "968b9fcb26bdeb8e0a861a9df05361474666d51b"
parent = "3a15b4ac6ac8e70b1a9b18ecc18e8434462899b3"
commit_url = "https://github.com/vercel/next.js/commit/968b9fcb26bdeb8e0a861a9df05361474666d51b"
vendored = false
host = "github"
path = "packages/next/src/server/lib/incremental-cache/file-system-cache.ts"
mode = "name"
relpath = "packages/next/src/server/lib/incremental-cache/file-system-cache.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-25"
fix_lines = { in_function = 26, in_file = 20, source_total = 27 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "packages/next/src/server/lib/incremental-cache/file-system-cache.ts"
function = "getFilePath"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-p293-qw3h-jr36: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers"

[[pair]]
name = "composer-install-53b8bb4"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "composer/composer"
cve = "CVE-2026-59944 GHSA-96h3-5x6v-m776"
cwe = "CWE-22"
ecosystem = "composer"
published_at = "2026-10-02T19:14:34Z"
post_cutoff = true
commit = "53b8bb4c24697b2f00a18cf1ef35a10392701b89"
parent = "24e396b5279a92fadf4897dd701d2cb97942cda3"
commit_url = "https://github.com/composer/composer/commit/53b8bb4c24697b2f00a18cf1ef35a10392701b89"
vendored = false
host = "github"
path = "src/Composer/Downloader/FileDownloader.php"
mode = "name"
relpath = "src/Composer/Downloader/FileDownloader.php"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-08-27"
fix_lines = { in_function = 12, in_file = 10, source_total = 39 }

[[pair.expected]]
cwe = "CWE-22"
class = "path-traversal"
path = "src/Composer/Downloader/FileDownloader.php"
function = "install"
mechanism = "path_join_user_input"
family = "path"
evidence = "GHSA-96h3-5x6v-m776: Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path"

[[pair]]
name = "vue-cli-mayproxy-72ba750"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "javascript"
origin = "github-advisory"
license = "MIT"
repo = "vuejs/vue-cli"
cve = "CVE-2026-9595 GHSA-mx8g-39q3-5c79"
cwe = "CWE-441"
ecosystem = "npm"
published_at = "2026-06-17T18:13:31Z"
post_cutoff = true
commit = "72ba7505aff2a8314e82aa5082379a77504a1fcb"
parent = "74fae4454b1fc5167beb3e2eba1c59ba3343fed4"
commit_url = "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
vendored = false
host = "github"
path = "packages/@vue/cli-service/lib/util/prepareProxy.js"
mode = "name"
relpath = "packages/@vue/cli-service/lib/util/prepareProxy.js"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2019-09-07"
fix_lines = { in_function = 4, in_file = 6, source_total = 8 }

[[pair.expected]]
cwe = "CWE-441"
class = "ssrf"
path = "packages/@vue/cli-service/lib/util/prepareProxy.js"
function = "mayProxy"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-mx8g-39q3-5c79: webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies"

[[pair]]
name = "h3-redirectback-459a1c6"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "h3js/h3"
cve = "GHSA-fp4x-ggrf-wmc6"
cwe = "CWE-601"
ecosystem = "npm"
published_at = "2026-03-23T21:48:24Z"
post_cutoff = false
commit = "459a1c6593365b0810e9c502df7c3e82837321d7"
parent = "388b8f06e060a219d11bbc6be7f70f38d8bbea01"
commit_url = "https://github.com/h3js/h3/commit/459a1c6593365b0810e9c502df7c3e82837321d7"
vendored = false
host = "github"
path = "src/utils/response.ts"
mode = "name"
relpath = "src/utils/response.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-03-21"
fix_lines = { in_function = 6, in_file = 5, source_total = 6 }

[[pair.expected]]
cwe = "CWE-601"
class = "open_redirect"
path = "src/utils/response.ts"
function = "redirectBack"
mechanism = "validation_strength"
family = "untrusted_destination"
evidence = "GHSA-fp4x-ggrf-wmc6: H3 has an Open Redirect via Protocol-Relative Path in redirectBack() Referer Validation"

[[pair]]
name = "rembg-s-command-07ad0d4"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "danielgatis/rembg"
cve = "GHSA-55v6-g8pm-pw4c"
cwe = "CWE-918"
ecosystem = "pip"
published_at = "2026-04-10T22:09:15Z"
post_cutoff = false
commit = "07ad0d493057bddf821dcc3e2410eb7e065257c0"
parent = "7c76d3cdc5757ffbda6a76664b24cfbecdb80273"
commit_url = "https://github.com/danielgatis/rembg/commit/07ad0d493057bddf821dcc3e2410eb7e065257c0"
vendored = false
host = "github"
path = "rembg/commands/s_command.py"
mode = "name"
relpath = "rembg/commands/s_command.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-04-08"
fix_lines = { in_function = 32, in_file = 38, source_total = 40 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "rembg/commands/s_command.py"
function = "s_command"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-55v6-g8pm-pw4c: rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration"

[[pair]]
name = "http-server-getpreviousurl-2008fb6"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "adonisjs/http-server"
cve = "CVE-2026-40255 GHSA-6qvv-pj99-48qm"
cwe = "CWE-601"
ecosystem = "npm"
published_at = "2026-04-14T20:01:28Z"
post_cutoff = false
commit = "2008fb6cf4f6f1c0ca5797d57def4d93e1c3de08"
parent = "929ea1abda5bf0ce4a6d5b52fe8c5f7e621f4240"
commit_url = "https://github.com/adonisjs/http-server/commit/2008fb6cf4f6f1c0ca5797d57def4d93e1c3de08"
vendored = false
host = "github"
path = "src/helpers.ts"
mode = "name"
relpath = "src/helpers.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-04-09"
fix_lines = { in_function = 12, in_file = 77, source_total = 88 }

[[pair.expected]]
cwe = "CWE-601"
class = "open_redirect"
path = "src/helpers.ts"
function = "getPreviousUrl"
mechanism = "validation_strength"
family = "untrusted_destination"
evidence = "GHSA-6qvv-pj99-48qm: @adonisjs/http-server has an Open Redirect vulnerability"

[[pair]]
name = "authlib-get-authorization-grant-3be0846"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "BSD-3-Clause"
repo = "authlib/authlib"
cve = "CVE-2026-41479 GHSA-w8p2-r796-3vmq"
cwe = "CWE-601"
ecosystem = "pip"
published_at = "2026-06-08T17:52:04Z"
post_cutoff = true
commit = "3be08468201a7766a93012ce149ea12822cab096"
parent = "9266eaa2227ad7e21dc731b2a4a01909aabd934b"
commit_url = "https://github.com/authlib/authlib/commit/3be08468201a7766a93012ce149ea12822cab096"
vendored = false
host = "github"
path = "authlib/oauth2/rfc6749/authorization_server.py"
mode = "name"
relpath = "authlib/oauth2/rfc6749/authorization_server.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-04-13"
fix_lines = { in_function = 10, in_file = 12, source_total = 13 }

[[pair.expected]]
cwe = "CWE-601"
class = "open_redirect"
path = "authlib/oauth2/rfc6749/authorization_server.py"
function = "get_authorization_grant"
mechanism = "validation_strength"
family = "untrusted_destination"
evidence = "GHSA-w8p2-r796-3vmq: Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type"

[[pair]]
name = "java-client-overrideserverurl-2b9cd44"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "java"
origin = "github-advisory"
license = "Apache-2.0"
repo = "appium/java-client"
cve = "CVE-2026-43910 GHSA-28f5-38xr-jh2w"
cwe = "CWE-441"
ecosystem = "maven"
published_at = "2026-07-28T14:26:53Z"
post_cutoff = true
commit = "2b9cd442b9dbf56ccc6f1e83aeeb411c0ec230c9"
parent = "6b7597f62bb02b15310f637dd76fd49500d98133"
commit_url = "https://github.com/appium/java-client/commit/2b9cd442b9dbf56ccc6f1e83aeeb411c0ec230c9"
vendored = false
host = "github"
path = "src/main/java/io/appium/java_client/remote/AppiumCommandExecutor.java"
mode = "name"
relpath = "src/main/java/io/appium/java_client/remote/AppiumCommandExecutor.java"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-04-19"
fix_lines = { in_function = 1, in_file = 9, source_total = 88 }

[[pair.expected]]
cwe = "CWE-441"
class = "ssrf"
path = "src/main/java/io/appium/java_client/remote/AppiumCommandExecutor.java"
function = "overrideServerUrl"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-28f5-38xr-jh2w: java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor"

[[pair]]
name = "n8n-mcp-validatewebhookurl-9639f75"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "czlonkowski/n8n-mcp"
cve = "CVE-2026-42449 GHSA-56c3-vfp2-5qqj"
cwe = "CWE-918"
ecosystem = "npm"
published_at = "2026-04-30T18:12:54Z"
post_cutoff = false
commit = "9639f757853149f0cb16663cc8b6b6468f27a25f"
parent = "59b665bda36797823df238aeaf20adb862c9f451"
commit_url = "https://github.com/czlonkowski/n8n-mcp/commit/9639f757853149f0cb16663cc8b6b6468f27a25f"
vendored = false
host = "github"
path = "src/utils/ssrf-protection.ts"
mode = "name"
relpath = "src/utils/ssrf-protection.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-04-21"
fix_lines = { in_function = 10, in_file = 64, source_total = 95 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "src/utils/ssrf-protection.ts"
function = "validateWebhookUrl"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-56c3-vfp2-5qqj: n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders"

[[pair]]
name = "ufo-withoutbase-5cd9e67"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "unjs/ufo"
cve = "CVE-2026-44372 GHSA-9phm-9p8f-hw5m"
cwe = "CWE-601"
ecosystem = "npm"
published_at = "2026-05-06T23:02:45Z"
post_cutoff = false
commit = "5cd9e676711af3f4e4b5398ddf6ca8d52c1c7e1f"
parent = "a7b94e69ff6159de8ddfd4940c90db4708c0d67e"
commit_url = "https://github.com/unjs/ufo/commit/5cd9e676711af3f4e4b5398ddf6ca8d52c1c7e1f"
vendored = false
host = "github"
path = "src/utils.ts"
mode = "name"
relpath = "src/utils.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-04-29"
fix_lines = { in_function = 4, in_file = 4, source_total = 6 }

[[pair.expected]]
cwe = "CWE-601"
class = "open_redirect"
path = "src/utils.ts"
function = "withoutBase"
mechanism = "validation_strength"
family = "untrusted_destination"
evidence = "GHSA-9phm-9p8f-hw5m: Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules"

[[pair]]
name = "symfony-dogenerate-4b63c3a"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "symfony/symfony"
cve = "CVE-2026-48784 GHSA-h5x3-xfc9-m39h"
cwe = "CWE-601"
ecosystem = "composer"
published_at = "2026-06-15T17:33:46Z"
post_cutoff = true
commit = "4b63c3a3f7af04ecd79c89a594b0b02a01990b1d"
parent = "44cf08237d3398af140a997e5bbf3e12a9f8fcdb"
commit_url = "https://github.com/symfony/symfony/commit/4b63c3a3f7af04ecd79c89a594b0b02a01990b1d"
vendored = false
host = "github"
path = "src/Symfony/Component/Routing/Generator/UrlGenerator.php"
mode = "name"
relpath = "src/Symfony/Component/Routing/Generator/UrlGenerator.php"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-05-22"
fix_lines = { in_function = 15, in_file = 10, source_total = 27 }

[[pair.expected]]
cwe = "CWE-601"
class = "open_redirect"
path = "src/Symfony/Component/Routing/Generator/UrlGenerator.php"
function = "doGenerate"
mechanism = "validation_strength"
family = "untrusted_destination"
evidence = "GHSA-h5x3-xfc9-m39h: Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization"

[[pair]]
name = "php-weasyprint-isoptionurl-9582dcf"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "pontedilana/php-weasyprint"
cve = "CVE-2026-49359 GHSA-x8g9-h984-pc36"
cwe = "CWE-918"
ecosystem = "composer"
published_at = "2026-06-26T22:11:40Z"
post_cutoff = true
commit = "9582dcf119a405276cf55e9e10bc577a887792cb"
parent = "7499bfec2616e372f4befe82e27eee1ab29d6e17"
commit_url = "https://github.com/pontedilana/php-weasyprint/commit/9582dcf119a405276cf55e9e10bc577a887792cb"
vendored = false
host = "github"
path = "src/Pdf.php"
mode = "name"
relpath = "src/Pdf.php"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-05-25"
fix_lines = { in_function = 5, in_file = 24, source_total = 26 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "src/Pdf.php"
function = "isOptionUrl"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-x8g9-h984-pc36: PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option"

[[pair]]
name = "compliance-trestle-check-metadata-endpoints-d107cd1"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "oscal-compass/compliance-trestle"
cve = "CVE-2026-52776 GHSA-h47f-gmjp-m7rr"
cwe = "CWE-918"
ecosystem = "pip"
published_at = "2026-08-12T15:21:17Z"
post_cutoff = true
commit = "d107cd16efe8eb15d46be3c1d97f1ec73d32447c"
parent = "e92bde95d24ac9cec46618c031d7cb9c19b3e833"
commit_url = "https://github.com/oscal-compass/compliance-trestle/commit/d107cd16efe8eb15d46be3c1d97f1ec73d32447c"
vendored = false
host = "github"
path = "trestle/core/remote/security.py"
mode = "name"
relpath = "trestle/core/remote/security.py"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-06-09"
fix_lines = { in_function = 19, in_file = 84, source_total = 94 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "trestle/core/remote/security.py"
function = "_check_metadata_endpoints"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-h47f-gmjp-m7rr: compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0"

[[pair]]
name = "vllm-preprocess-audio-54503ec"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "Apache-2.0"
repo = "vllm-project/vllm"
cve = "CVE-2026-73560 GHSA-4hhp-h66f-j5j7"
cwe = "CWE-918"
ecosystem = "pip"
published_at = "2026-09-08T20:42:00Z"
post_cutoff = true
commit = "54503ecec0f3ac31e5ecfc5f28652e4cc42307b5"
parent = "006731153693b01320feb93ab165de24fc364b0c"
commit_url = "https://github.com/vllm-project/vllm/commit/54503ecec0f3ac31e5ecfc5f28652e4cc42307b5"
vendored = false
host = "github"
path = "vllm/transformers_utils/processors/mimo_v2_omni.py"
mode = "name"
relpath = "vllm/transformers_utils/processors/mimo_v2_omni.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-11"
fix_lines = { in_function = 34, in_file = 84, source_total = 98 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "vllm/transformers_utils/processors/mimo_v2_omni.py"
function = "preprocess_audio"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-4hhp-h66f-j5j7: vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections"

[[pair]]
name = "phpspreadsheet-webservice-7ef7b25"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "php"
origin = "github-advisory"
license = "MIT"
repo = "phpoffice/phpspreadsheet"
cve = "CVE-2026-59931 GHSA-6hq5-7373-42rg"
cwe = "CWE-918"
ecosystem = "composer"
published_at = "2026-07-23T14:55:48Z"
post_cutoff = true
commit = "7ef7b25e8548a6ded79dac74e2e2c7acdac38d8d"
parent = "85f2556b0bf5269061bf45932ecda8a128d81750"
commit_url = "https://github.com/phpoffice/phpspreadsheet/commit/7ef7b25e8548a6ded79dac74e2e2c7acdac38d8d"
vendored = false
host = "github"
path = "src/PhpSpreadsheet/Calculation/Web/Service.php"
mode = "name"
relpath = "src/PhpSpreadsheet/Calculation/Web/Service.php"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-07-12"
fix_lines = { in_function = 4, in_file = 2, source_total = 3 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "src/PhpSpreadsheet/Calculation/Web/Service.php"
function = "webService"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-6hq5-7373-42rg: PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist"

[[pair]]
name = "frontmcp-dofetch-077201e"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "Apache-2.0"
repo = "agentfront/frontmcp"
cve = "GHSA-8q49-2h5h-434x"
cwe = "CWE-918"
ecosystem = "npm"
published_at = "2026-07-24T22:40:00Z"
post_cutoff = true
commit = "077201e109bf6f45dbc85c36d6bd77ded18ab13e"
parent = "d0337a416d199aaacacefdfecfa9b60a6c1db0ba"
commit_url = "https://github.com/agentfront/frontmcp/commit/077201e109bf6f45dbc85c36d6bd77ded18ab13e"
vendored = false
host = "github"
path = "libs/adapters/src/openapi/openapi-spec-poller.ts"
mode = "name"
relpath = "libs/adapters/src/openapi/openapi-spec-poller.ts"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-07-23"
fix_lines = { in_function = 60, in_file = 53, source_total = 100 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "libs/adapters/src/openapi/openapi-spec-poller.ts"
function = "doFetch"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-8q49-2h5h-434x: FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller"

[[pair]]
name = "ip-address-islinklocal-d03e960"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "typescript"
origin = "github-advisory"
license = "MIT"
repo = "beaugunderson/ip-address"
cve = "CVE-2026-101913 GHSA-rpw4-54j3-4h4q"
cwe = "CWE-918"
ecosystem = "npm"
published_at = "2026-09-28T20:43:55Z"
post_cutoff = true
commit = "d03e960c7cc3179ef25c8a44b4f94dd499625546"
parent = "ab3dc88bcf5374344168a2ba075ca7ac4ff257f8"
commit_url = "https://github.com/beaugunderson/ip-address/commit/d03e960c7cc3179ef25c8a44b4f94dd499625546"
vendored = false
host = "github"
path = "src/ipv6.ts"
mode = "name"
relpath = "src/ipv6.ts"
provenance = "agent"
split = "holdout"
review_tier = "advisory"
fix_date = "2026-08-29"
fix_lines = { in_function = 10, in_file = 14, source_total = 17 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "src/ipv6.ts"
function = "isLinkLocal"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-rpw4-54j3-4h4q: ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts"

[[pair]]
name = "pyjwt-fetch-data-0a795b8"
slice = "advisory-fixes"
batch = "2026-10-03"
language = "python"
origin = "github-advisory"
license = "MIT"
repo = "jpadilla/pyjwt"
cve = "CVE-2026-102267 GHSA-9v7f-9g4p-ffgj"
cwe = "CWE-918"
ecosystem = "pip"
published_at = "2026-09-29T23:15:00Z"
post_cutoff = true
commit = "0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
parent = "f91ed44dd65baaf457f4b3353ed35e98a753934c"
commit_url = "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
vendored = false
host = "github"
path = "jwt/jwks_client.py"
mode = "name"
relpath = "jwt/jwks_client.py"
provenance = "agent"
split = "train"
review_tier = "advisory"
fix_date = "2026-09-10"
fix_lines = { in_function = 8, in_file = 18, source_total = 21 }

[[pair.expected]]
cwe = "CWE-918"
class = "ssrf"
path = "jwt/jwks_client.py"
function = "fetch_data"
mechanism = "source_reaches_sink"
family = "untrusted_destination"
evidence = "GHSA-9v7f-9g4p-ffgj: PyJWT: PyJWKClient follows redirects when fetching JWKS"