From 3c2867e39a4157362fb055e5e2e96603adadb98d Mon Sep 17 00:00:00 2001
From: Zuhair Halawa <71436209+zuhairhalawa@users.noreply.github.com>
Date: Sun, 25 Oct 2026 17:12:03 +0400
Subject: [PATCH] [GHSA-xf64-4pmc-h8qf] Set the patched version to 2.6 and add
 the fix commit

Replaces last_affected 2.1 with fixed 2.6 and adds https://github.com/wger-project/wger/commit/415007165f146b56d2ee54b8fee879a2b5fd47b8 to the references.
---
 .../2026/10/GHSA-xf64-4pmc-h8qf/GHSA-xf64-4pmc-h8qf.json  | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2026/10/GHSA-xf64-4pmc-h8qf/GHSA-xf64-4pmc-h8qf.json b/advisories/github-reviewed/2026/10/GHSA-xf64-4pmc-h8qf/GHSA-xf64-4pmc-h8qf.json
index e68152567a71..38d06a56486e 100644
--- a/advisories/github-reviewed/2026/10/GHSA-xf64-4pmc-h8qf/GHSA-xf64-4pmc-h8qf.json
+++ b/advisories/github-reviewed/2026/10/GHSA-xf64-4pmc-h8qf/GHSA-xf64-4pmc-h8qf.json
@@ -28,7 +28,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "2.1"
+              "fixed": "2.6"
             }
           ]
         }
@@ -47,6 +47,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/wger-project/wger/releases/tag/2.6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wger-project/wger/commit/415007165f146b56d2ee54b8fee879a2b5fd47b8"
     }
   ],
   "database_specific": {
@@ -58,4 +62,4 @@
     "github_reviewed_at": "2026-10-07T13:45:33Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}