diff --git a/advisories/github-reviewed/2026/06/GHSA-ghvc-7hp8-2g2v/GHSA-ghvc-7hp8-2g2v.json b/advisories/github-reviewed/2026/06/GHSA-ghvc-7hp8-2g2v/GHSA-ghvc-7hp8-2g2v.json index 57b8feecea95..7ca688f7c36c 100644 --- a/advisories/github-reviewed/2026/06/GHSA-ghvc-7hp8-2g2v/GHSA-ghvc-7hp8-2g2v.json +++ b/advisories/github-reviewed/2026/06/GHSA-ghvc-7hp8-2g2v/GHSA-ghvc-7hp8-2g2v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-ghvc-7hp8-2g2v", - "modified": "2026-08-06T19:12:38Z", + "modified": "2026-08-06T19:12:39Z", "published": "2026-06-12T12:31:34Z", "aliases": [ "CVE-2026-50645" @@ -44,7 +44,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "4.0.0" }, { "fixed": "4.1.7" @@ -52,6 +52,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.cxf:cxf-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.6.12" + } + ] + } + ] } ], "references": [ @@ -59,6 +78,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50645" }, + { + "type": "WEB", + "url": "https://cxf.apache.org/security-advisories.data/CVE-2026-50645.txt" + }, { "type": "PACKAGE", "url": "https://github.com/apache/cxf"