From 78099cd54ace59e168a4e0de04da04df9640aebf Mon Sep 17 00:00:00 2001
From: Zuhair Halawa <71436209+zuhairhalawa@users.noreply.github.com>
Date: Sun, 25 Oct 2026 17:16:57 +0400
Subject: [PATCH] [GHSA-c72h-82w6-rqfp] Add the fix commits as references

Adds the two commits that fix this vulnerability to the references.
---
 .../10/GHSA-c72h-82w6-rqfp/GHSA-c72h-82w6-rqfp.json    | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/10/GHSA-c72h-82w6-rqfp/GHSA-c72h-82w6-rqfp.json b/advisories/github-reviewed/2026/10/GHSA-c72h-82w6-rqfp/GHSA-c72h-82w6-rqfp.json
index 06dd7da0450c..97ec62e66e40 100644
--- a/advisories/github-reviewed/2026/10/GHSA-c72h-82w6-rqfp/GHSA-c72h-82w6-rqfp.json
+++ b/advisories/github-reviewed/2026/10/GHSA-c72h-82w6-rqfp/GHSA-c72h-82w6-rqfp.json
@@ -47,6 +47,14 @@
     {
       "type": "WEB",
       "url": "https://github.com/wger-project/wger/releases/tag/2.6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wger-project/wger/commit/b51f472ab2f790d8b4e67b4371bd6d1915af2930"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wger-project/wger/commit/e1d329ff4ef6213b0a1adc5daf115e6d8981190c"
     }
   ],
   "database_specific": {
@@ -58,4 +66,4 @@
     "github_reviewed_at": "2026-10-07T13:33:14Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}