Publish Advisories

GHSA-4gx2-pc4f-wq37
GHSA-fjrm-76x2-c4q4
GHSA-mmwr-2jhp-mc7j
GHSA-pr46-2v3c-5356
GHSA-pwjp-ccjc-ghwg
GHSA-5789-5fc7-67v3

Author: advisory-database[bot]

advisories/github-reviewed/2026/04/GHSA-4gx2-pc4f-wq37/GHSA-4gx2-pc4f-wq37.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4gx2-pc4f-wq37",
-  "modified": "2026-04-08T00:12:26Z",
+  "modified": "2026-06-06T00:24:06Z",
   "published": "2026-04-08T00:12:26Z",
   "aliases": [
     "CVE-2026-39376"
@@ -50,6 +50,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/kagisearch/fastfeedparser"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/fastfeedparser/PYSEC-2026-60.yaml"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2026/04/GHSA-fjrm-76x2-c4q4/GHSA-fjrm-76x2-c4q4.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fjrm-76x2-c4q4",
-  "modified": "2026-04-08T00:16:14Z",
+  "modified": "2026-06-06T00:25:45Z",
   "published": "2026-04-08T00:16:14Z",
   "aliases": [
     "CVE-2026-39373"
@@ -28,11 +28,14 @@
               "introduced": "0"
             },
             {
-              "last_affected": "1.5.6"
+              "fixed": "1.5.7"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 1.5.6"
+      }
     }
   ],
   "references": [
@@ -44,9 +47,21 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39373"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/latchset/jwcrypto/commit/25db861d8b29434838669a94a843af03d29ea6ed"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/latchset/jwcrypto"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/latchset/jwcrypto/releases/tag/v1.5.7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/jwcrypto/PYSEC-2026-70.yaml"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2026/04/GHSA-mmwr-2jhp-mc7j/GHSA-mmwr-2jhp-mc7j.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mmwr-2jhp-mc7j",
-  "modified": "2026-04-08T15:40:25Z",
+  "modified": "2026-06-06T00:26:27Z",
   "published": "2026-04-07T15:30:52Z",
   "aliases": [
     "CVE-2026-4292"
@@ -86,6 +86,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/django/django"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-53.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://groups.google.com/g/django-announce"

advisories/github-reviewed/2026/04/GHSA-pr46-2v3c-5356/GHSA-pr46-2v3c-5356.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pr46-2v3c-5356",
-  "modified": "2026-04-24T13:51:30Z",
+  "modified": "2026-06-06T00:26:38Z",
   "published": "2026-04-08T00:18:46Z",
   "aliases": [
     "CVE-2026-39847"
@@ -47,6 +47,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/emmett-framework/emmett"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/emmett/PYSEC-2026-59.yaml"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2026/04/GHSA-pwjp-ccjc-ghwg/GHSA-pwjp-ccjc-ghwg.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pwjp-ccjc-ghwg",
-  "modified": "2026-04-08T15:40:11Z",
+  "modified": "2026-06-06T00:26:11Z",
   "published": "2026-04-07T15:30:52Z",
   "aliases": [
     "CVE-2026-4277"
@@ -86,6 +86,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/django/django"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-52.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://groups.google.com/g/django-announce"

advisories/github-reviewed/2026/05/GHSA-5789-5fc7-67v3/GHSA-5789-5fc7-67v3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5789-5fc7-67v3",
-  "modified": "2026-05-08T15:29:39Z",
+  "modified": "2026-06-06T00:23:56Z",
   "published": "2026-05-05T16:49:10Z",
   "aliases": [
     "CVE-2026-35397"
@@ -54,6 +54,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/jupyter-server/jupyter_server"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2026-68.yaml"
     }
   ],
   "database_specific": {