From 8d6b49a6ad3bf98971add137efc49496ab0639f3 Mon Sep 17 00:00:00 2001
From: Zuhair Halawa <71436209+zuhairhalawa@users.noreply.github.com>
Date: Sun, 25 Oct 2026 17:16:24 +0400
Subject: [PATCH] [GHSA-mw8f-w6p8-xrf4] Set the patched version to 2.6 and add
 the fix commit

Replaces last_affected 2.5 with fixed 2.6 and adds https://github.com/wger-project/wger/commit/635d1dc4006c95a73f92b170ce0e183eb3ccddd6 to the references.
---
 .../2026/05/GHSA-mw8f-w6p8-xrf4/GHSA-mw8f-w6p8-xrf4.json  | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2026/05/GHSA-mw8f-w6p8-xrf4/GHSA-mw8f-w6p8-xrf4.json b/advisories/github-reviewed/2026/05/GHSA-mw8f-w6p8-xrf4/GHSA-mw8f-w6p8-xrf4.json
index ffc28717a09a..1a028d612d62 100644
--- a/advisories/github-reviewed/2026/05/GHSA-mw8f-w6p8-xrf4/GHSA-mw8f-w6p8-xrf4.json
+++ b/advisories/github-reviewed/2026/05/GHSA-mw8f-w6p8-xrf4/GHSA-mw8f-w6p8-xrf4.json
@@ -26,7 +26,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "2.5"
+              "fixed": "2.6"
             }
           ]
         }
@@ -41,6 +41,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/wger-project/wger"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wger-project/wger/commit/635d1dc4006c95a73f92b170ce0e183eb3ccddd6"
     }
   ],
   "database_specific": {
@@ -53,4 +57,4 @@
     "github_reviewed_at": "2026-05-20T15:37:26Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}