diff --git a/data/OSS-Fuzz/OSV-2021-1343.json b/data/OSS-Fuzz/OSV-2021-1343.json
index 2b10529362..6c481e1c01 100644
--- a/data/OSS-Fuzz/OSV-2021-1343.json
+++ b/data/OSS-Fuzz/OSV-2021-1343.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2021-1343","published":"2021-09-21T00:01:33.177403Z","modified":"2026-11-11T14:30:03.220463676Z","summary":"Heap-buffer-overflow in get_next_owned_entity","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nget_next_owned_entity\ndwg_write_dxfb\nllvmfuzz.c\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"1d691254204db38d1473e050776346b7de751ce8"}]}],"versions":["0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-1343.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2021-1343","published":"2021-09-21T00:01:33.177403Z","modified":"2026-11-13T14:30:04.215267634Z","summary":"Heap-buffer-overflow in get_next_owned_entity","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nget_next_owned_entity\ndwg_write_dxfb\nllvmfuzz.c\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"1d691254204db38d1473e050776346b7de751ce8"}]}],"versions":["0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-1343.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-1176.json b/data/OSS-Fuzz/OSV-2022-1176.json
index d2657bbe32..a0865cf99d 100644
--- a/data/OSS-Fuzz/OSV-2022-1176.json
+++ b/data/OSS-Fuzz/OSV-2022-1176.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-1176","published":"2022-11-18T13:00:26.857477Z","modified":"2026-11-12T14:30:06.189452477Z","summary":"Heap-double-free in dwg_free","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free\nllvmfuzz.c\ndwg_free\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"2d4a473b670848fe9aac2fde249964d1ed9ba97e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1176.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-1176","published":"2022-11-18T13:00:26.857477Z","modified":"2026-11-13T14:30:03.104793651Z","summary":"Heap-double-free in dwg_free","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free\nllvmfuzz.c\ndwg_free\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"2d4a473b670848fe9aac2fde249964d1ed9ba97e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1176.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-1198.json b/data/OSS-Fuzz/OSV-2022-1198.json
index c64335d0a2..8d55582259 100644
--- a/data/OSS-Fuzz/OSV-2022-1198.json
+++ b/data/OSS-Fuzz/OSV-2022-1198.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-1198","published":"2022-11-23T13:02:06.623044Z","modified":"2026-11-12T14:30:04.366030564Z","summary":"Heap-buffer-overflow in dwg_json_LTYPE","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_json_LTYPE\njson_objects_write\ndwg_write_json\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"580e8bbebf18579b97e2c20b032368b9079624ca"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1198.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-1198","published":"2022-11-23T13:02:06.623044Z","modified":"2026-11-13T14:30:03.083138078Z","summary":"Heap-buffer-overflow in dwg_json_LTYPE","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_json_LTYPE\njson_objects_write\ndwg_write_json\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"580e8bbebf18579b97e2c20b032368b9079624ca"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1198.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-1259.json b/data/OSS-Fuzz/OSV-2022-1259.json
index 6cf30ee206..d79ad1bb97 100644
--- a/data/OSS-Fuzz/OSV-2022-1259.json
+++ b/data/OSS-Fuzz/OSV-2022-1259.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-1259","published":"2022-12-13T13:00:46.870838Z","modified":"2026-11-12T14:30:04.362441034Z","summary":"Heap-buffer-overflow in dwg_decode_INSERT_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_INSERT_private\ndwg_decode_INSERT\ndwg_decode_add_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1259.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-1259","published":"2022-12-13T13:00:46.870838Z","modified":"2026-11-13T14:30:03.107496133Z","summary":"Heap-buffer-overflow in dwg_decode_INSERT_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_INSERT_private\ndwg_decode_INSERT\ndwg_decode_add_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1259.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-372.json b/data/OSS-Fuzz/OSV-2022-372.json
index 0504175daf..6567763343 100644
--- a/data/OSS-Fuzz/OSV-2022-372.json
+++ b/data/OSS-Fuzz/OSV-2022-372.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-372","published":"2022-04-26T00:00:09.352798Z","modified":"2026-11-12T14:30:04.367952623Z","summary":"Heap-buffer-overflow in dwg_encode_VERTEX_2D","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_encode_VERTEX_2D\ndwg_encode_add_object\ndwg_encode\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-372.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-372","published":"2022-04-26T00:00:09.352798Z","modified":"2026-11-13T14:30:03.102306062Z","summary":"Heap-buffer-overflow in dwg_encode_VERTEX_2D","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_encode_VERTEX_2D\ndwg_encode_add_object\ndwg_encode\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-372.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-379.json b/data/OSS-Fuzz/OSV-2022-379.json
index 91cc3710da..e7ceed9598 100644
--- a/data/OSS-Fuzz/OSV-2022-379.json
+++ b/data/OSS-Fuzz/OSV-2022-379.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-379","published":"2022-04-27T00:00:44.539231Z","modified":"2026-11-12T14:30:05.295061106Z","summary":"Segv on unknown address in bit_write_TV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014\n\n```\nCrash type: Segv on unknown address\nCrash state:\nbit_write_TV\nbit_write_T\ndwg_encode_BLOCK\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-379.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-379","published":"2022-04-27T00:00:44.539231Z","modified":"2026-11-13T14:30:03.074510181Z","summary":"Segv on unknown address in bit_write_TV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014\n\n```\nCrash type: Segv on unknown address\nCrash state:\nbit_write_TV\nbit_write_T\ndwg_encode_BLOCK\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-379.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-388.json b/data/OSS-Fuzz/OSV-2022-388.json
index cd51663c81..e629d954b0 100644
--- a/data/OSS-Fuzz/OSV-2022-388.json
+++ b/data/OSS-Fuzz/OSV-2022-388.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-388","published":"2022-05-01T00:01:54.904711Z","modified":"2026-11-12T14:30:05.363352097Z","summary":"Segv on unknown address in dwg_ref_get_object","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151\n\n```\nCrash type: Segv on unknown address\nCrash state:\ndwg_ref_get_object\ndwg_geojson_feature\ndwg_geojson_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-388.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-388","published":"2022-05-01T00:01:54.904711Z","modified":"2026-11-13T14:30:03.099448916Z","summary":"Segv on unknown address in dwg_ref_get_object","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151\n\n```\nCrash type: Segv on unknown address\nCrash state:\ndwg_ref_get_object\ndwg_geojson_feature\ndwg_geojson_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-388.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-400.json b/data/OSS-Fuzz/OSV-2022-400.json
index 3542897955..e49532f7c6 100644
--- a/data/OSS-Fuzz/OSV-2022-400.json
+++ b/data/OSS-Fuzz/OSV-2022-400.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-400","published":"2022-05-08T00:00:40.782520Z","modified":"2026-11-12T14:30:04.357101878Z","summary":"Heap-double-free in dwg_free_XRECORD_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_XRECORD_private\ndwg_free_XRECORD\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"4eadb3538aee39bf0732ee5b273f414ddafa765e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8544"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-400.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-400","published":"2022-05-08T00:00:40.782520Z","modified":"2026-11-13T14:30:03.074873047Z","summary":"Heap-double-free in dwg_free_XRECORD_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_XRECORD_private\ndwg_free_XRECORD\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"4eadb3538aee39bf0732ee5b273f414ddafa765e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958","0.14.8544"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-400.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-653.json b/data/OSS-Fuzz/OSV-2022-653.json
index 7319dfef96..7bd424e814 100644
--- a/data/OSS-Fuzz/OSV-2022-653.json
+++ b/data/OSS-Fuzz/OSV-2022-653.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-653","published":"2022-07-30T00:01:52.491112Z","modified":"2026-11-12T14:30:04.360929516Z","summary":"Heap-double-free in dwg_free_common_entity_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_common_entity_data\ndwg_free_DIMENSION_ANG2LN\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-653.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-653","published":"2022-07-30T00:01:52.491112Z","modified":"2026-11-13T14:30:03.083149311Z","summary":"Heap-double-free in dwg_free_common_entity_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_common_entity_data\ndwg_free_DIMENSION_ANG2LN\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-653.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-714.json b/data/OSS-Fuzz/OSV-2022-714.json
index 22f9be482e..49e8824b42 100644
--- a/data/OSS-Fuzz/OSV-2022-714.json
+++ b/data/OSS-Fuzz/OSV-2022-714.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-714","published":"2022-08-15T00:00:47.794062Z","modified":"2026-11-12T14:30:04.355338067Z","summary":"Heap-buffer-overflow in dynapi_set_helper","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194\n\n```\nCrash type: Heap-buffer-overflow WRITE 16\nCrash state:\ndynapi_set_helper\ndwg_dynapi_header_set_value\njson_HEADER\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-714.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-714","published":"2022-08-15T00:00:47.794062Z","modified":"2026-11-13T14:30:03.097584594Z","summary":"Heap-buffer-overflow in dynapi_set_helper","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194\n\n```\nCrash type: Heap-buffer-overflow WRITE 16\nCrash state:\ndynapi_set_helper\ndwg_dynapi_header_set_value\njson_HEADER\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-714.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2022-834.json b/data/OSS-Fuzz/OSV-2022-834.json
index ed73fcd25d..51dbe0955a 100644
--- a/data/OSS-Fuzz/OSV-2022-834.json
+++ b/data/OSS-Fuzz/OSV-2022-834.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2022-834","published":"2022-09-04T00:00:31.605787Z","modified":"2026-11-10T14:30:05.709531600Z","summary":"Heap-use-after-free in mk_event_timeout_destroy","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50924\n\n```\nCrash type: Heap-use-after-free WRITE 8\nCrash state:\nmk_event_timeout_destroy\nflb_sched_destroy\nflb_config_exit\n```\n","affected":[{"package":{"name":"fluent-bit","ecosystem":"OSS-Fuzz","purl":"pkg:generic/fluent-bit"},"ranges":[{"type":"GIT","repo":"https://github.com/fluent/fluent-bit/","events":[{"introduced":"0c5d8da6bbf32d4712d4dd718155ac2301b1bb17"},{"introduced":"73bc3ec78451aa41757bf7a12366228b79527544"}]}],"versions":["v2.0.0","v2.0.0-rc1","v2.0.0-rc2","v2.0.0-rc3","v2.0.0pre","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.0.5","v2.0.6","v2.0.7","vv.2.0.7","v2.0.8","tiger-2.0.9-dev-20230104","v2.0.9","v2.0.10","v2.0.11","v2.1.0-rc1","v2.1.0-rc2","v2.1.0","v2.1.1","v2.1.2","v2.0.12","v2.1.3","v2.0.13","v2.0.14","v2.1.4","v2.1.5","v2.1.5-windows-artifact-fix","v2.1.6","v2.1.7","v2.1.8","v2.1.9","v2.1.10","v2.2.0","v2.2.1","v2.2.2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.0.4","v2.2.3","v3.0.5","v3.0.6","v3.0.7","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.1.6","v3.1.7","v3.1.8","v3.1.9","v3.1.10","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.2.4","v3.2.5","v3.2.6","v3.2.7","v3.2.8","v3.2.9","v3.2.10","v4.0.0","v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.0.10","v4.0.11","v4.1.0","v4.0.12","v4.1.1","v4.0.13","v4.2.0","v4.2.1","v4.2.2","v5.0.0-dev-20260228","v5.0.0","v5.0.1","v5.0.2","v5.0.3","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.2","v5.1.3","v5.1.4","v5.1.5","wasm-browser-e090fbd054c82ae67f12ebe926600827b6cf5f48","wasm-browser-364a2d700a05893618527fff8d4d1f9e5e2e35cd","wasm-browser-41dcc3d1f91a758921a2b995e7f249905c776277","wasm-browser-78911a0ff0594a2198235a96d6048d72909ff041","wasm-browser-85c7030b29c4a9702fa0229efd9eb71736e03038","wasm-browser-a0c6ac530896994398822df052015582e3830243","wasm-browser-a88af96c92534e1bb0d585f63e97e41cd543a059","wasm-browser-28ebf30c97d5bcb9ac6e3af3794023f1ebc92543","wasm-browser-9c04b3bcfcb50a036692ab30f2added0cb682215","wasm-browser-f6c314476f1fc9d6aac2bff1154a33a40a8a721a","wasm-browser-fc966e90da4d99afc36bee42e3ac444dcab9372e","v5.2.0","wasm-browser-8590ef6a819e36b84ee14ae325f46ea10b3ef852","wasm-browser-d9464c001e4ab5a17b8dac566e4f7ab25c2bcb0b","wasm-browser-e0149076aeff009d35fd495e55379cb78f1eb53f","v5.0.11","v5.0.10","v4.2.8","v4.2.7","v4.2.6","v4.2.5","v4.2.4","v4.2.3","v4.2.3.1","v4.0.14","v4.1.2"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2022-834.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50924"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2022-834","published":"2022-09-04T00:00:31.605787Z","modified":"2026-11-13T14:30:04.830071770Z","summary":"Heap-use-after-free in mk_event_timeout_destroy","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50924\n\n```\nCrash type: Heap-use-after-free WRITE 8\nCrash state:\nmk_event_timeout_destroy\nflb_sched_destroy\nflb_config_exit\n```\n","affected":[{"package":{"name":"fluent-bit","ecosystem":"OSS-Fuzz","purl":"pkg:generic/fluent-bit"},"ranges":[{"type":"GIT","repo":"https://github.com/fluent/fluent-bit/","events":[{"introduced":"0c5d8da6bbf32d4712d4dd718155ac2301b1bb17"},{"introduced":"73bc3ec78451aa41757bf7a12366228b79527544"}]}],"versions":["v2.0.0","v2.0.0-rc1","v2.0.0-rc2","v2.0.0-rc3","v2.0.0pre","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.0.5","v2.0.6","v2.0.7","vv.2.0.7","v2.0.8","tiger-2.0.9-dev-20230104","v2.0.9","v2.0.10","v2.0.11","v2.1.0-rc1","v2.1.0-rc2","v2.1.0","v2.1.1","v2.1.2","v2.0.12","v2.1.3","v2.0.13","v2.0.14","v2.1.4","v2.1.5","v2.1.5-windows-artifact-fix","v2.1.6","v2.1.7","v2.1.8","v2.1.9","v2.1.10","v2.2.0","v2.2.1","v2.2.2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.0.4","v2.2.3","v3.0.5","v3.0.6","v3.0.7","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.1.6","v3.1.7","v3.1.8","v3.1.9","v3.1.10","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.2.4","v3.2.5","v3.2.6","v3.2.7","v3.2.8","v3.2.9","v3.2.10","v4.0.0","v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.0.10","v4.0.11","v4.1.0","v4.0.12","v4.1.1","v4.0.13","v4.2.0","v4.2.1","v4.2.2","v5.0.0-dev-20260228","v5.0.0","v5.0.1","v5.0.2","v5.0.3","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.2","v5.1.3","v5.1.4","v5.1.5","wasm-browser-e090fbd054c82ae67f12ebe926600827b6cf5f48","wasm-browser-364a2d700a05893618527fff8d4d1f9e5e2e35cd","wasm-browser-41dcc3d1f91a758921a2b995e7f249905c776277","wasm-browser-78911a0ff0594a2198235a96d6048d72909ff041","wasm-browser-85c7030b29c4a9702fa0229efd9eb71736e03038","wasm-browser-a0c6ac530896994398822df052015582e3830243","wasm-browser-a88af96c92534e1bb0d585f63e97e41cd543a059","wasm-browser-28ebf30c97d5bcb9ac6e3af3794023f1ebc92543","wasm-browser-9c04b3bcfcb50a036692ab30f2added0cb682215","wasm-browser-f6c314476f1fc9d6aac2bff1154a33a40a8a721a","wasm-browser-fc966e90da4d99afc36bee42e3ac444dcab9372e","v5.2.0","wasm-browser-8590ef6a819e36b84ee14ae325f46ea10b3ef852","wasm-browser-d9464c001e4ab5a17b8dac566e4f7ab25c2bcb0b","wasm-browser-e0149076aeff009d35fd495e55379cb78f1eb53f","wasm-browser-27d56241b467f792c2e676706ee3ba8a0559becf","wasm-browser-f5a3cd20195a05542ec0b3e009084b0bce28ca54","v5.0.11","v5.0.10","v4.2.8","v4.2.7","v4.2.6","v4.2.5","v4.2.4","v4.2.3","v4.2.3.1","v4.0.14","v4.1.2"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2022-834.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50924"}]}
\ No newline at end of file
diff --git a/data/OSS-Fuzz/OSV-2023-307.json b/data/OSS-Fuzz/OSV-2023-307.json
index a74e777d23..3bedcf7812 100644
--- a/data/OSS-Fuzz/OSV-2023-307.json
+++ b/data/OSS-Fuzz/OSV-2023-307.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"OSV-2023-307","published":"2023-04-13T14:02:09.774988Z","modified":"2026-11-12T14:30:05.528845520Z","summary":"Heap-buffer-overflow in bit_read_BB","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.5465","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-307.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"OSV-2023-307","published":"2023-04-13T14:02:09.774988Z","modified":"2026-11-13T14:30:03.095905190Z","summary":"Heap-buffer-overflow in bit_read_BB","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.5465","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8941","0.14.8946","0.14.8958"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-307.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911"}]}
\ No newline at end of file
diff --git a/data/PyPI/GHSA-6655-6qjp-jx7x.json b/data/PyPI/GHSA-6655-6qjp-jx7x.json
new file mode 100644
index 0000000000..7b121d740d
--- /dev/null
+++ b/data/PyPI/GHSA-6655-6qjp-jx7x.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-6655-6qjp-jx7x","published":"2026-11-13T16:39:43Z","modified":"2026-11-13T16:45:03.387641194Z","aliases":["CVE-2026-126191"],"summary":"Soup Sieve: Exponential ReDoS in selector compilation via \\9-run in CSS_ESCAPES/IDENTIFIER","details":"### Summary\nThe IDENTIFIER/CSS_ESCAPES regex (css_parser.py:119-124) exhibits exponential backtracking on a run of ambiguous digit-escapes (`\\9`) in an attribute-name or tag position of an otherwise well-formed selector. It fires at compile time (before the SELECTOR_LIMIT guard) via the public `soupsieve.compile()` and BeautifulSoup `.select()`.\n\n### PoC (verified on soupsieve 2.9.2)\n\n    import soupsieve as sv\n    sv.compile('[a' + '\\\\9'*26 + '=x]')   # ~57 bytes -> ~10s; ~16x time per +4 chars\n\n### Novelty\nDistinct from the patched GHSA-836r-... (VALUE regex) and GHSA-2wc2-... (comma-list) advisories, which are fixed in 2.9.2; this is a different regex/vector.\n\n### Reachability\nCSS selectors are usually developer-controlled, so exposure requires an application that compiles UNTRUSTED selector strings (web-scraping-as-a-service, no-code/query builders, user-defined extraction rules). Where selectors are user-supplied, a ~60-byte string hangs the worker.\n\n### Note\nThis issue was fixed in version 3.0.0, which has been yanked from the PyPI registry. Use versions 3.0.2 and above to upgrade.","affected":[{"package":{"name":"soupsieve","ecosystem":"PyPI","purl":"pkg:pypi/soupsieve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2"}]}],"versions":["0.4","0.5","0.5.1","0.5.2","0.5.3","0.6","1.0","1.0.1","1.0.2","1.0b1","1.0b2","1.1","1.2","1.2.1","1.3","1.3.1","1.4","1.5","1.6","1.6.1","1.6.2","1.7","1.7.1","1.7.2","1.7.3","1.8","1.9","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6","2.0","2.0.1","2.1","2.10","2.2","2.2.1","2.3","2.3.1","2.3.2","2.3.2.post1","2.4","2.4.1","2.5","2.6","2.7","2.8","2.8.1","2.8.2","2.8.3","2.8.4","2.9","2.9.1","2.9.2","3.0","3.0.1"],"database_specific":{"last_known_affected_version_range":"<= 2.10","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-6655-6qjp-jx7x/GHSA-6655-6qjp-jx7x.json"}}],"references":[{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-6655-6qjp-jx7x"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126191"},{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/pull/300"},{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/commit/dbfa2854ff31a863326bd6660d4e55c6f068db9e"},{"type":"PACKAGE","url":"https://github.com/facelessuser/soupsieve"},{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/releases/tag/3.0"}],"database_specific":{"cwe_ids":["CWE-1333"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T16:39:43Z","nvd_published_at":"2026-11-12T17:17:32Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}
\ No newline at end of file
diff --git a/data/PyPI/GHSA-7g44-g9rc-x53w.json b/data/PyPI/GHSA-7g44-g9rc-x53w.json
new file mode 100644
index 0000000000..318d00ca68
--- /dev/null
+++ b/data/PyPI/GHSA-7g44-g9rc-x53w.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-7g44-g9rc-x53w","published":"2026-11-13T16:34:59Z","modified":"2026-11-13T16:45:03.468864320Z","aliases":["CVE-2026-126193"],"summary":"Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack","details":"## Summary\n\nThe Soup Sieve CSS selector parser recurses once per level of nested pseudo-class selector (`:is()`, `:not()`, `:where()`, `:has()`) without any limit on nesting depth. An unauthenticated attacker who can supply a CSS selector string to `soupsieve.compile()`, `soupsieve.select()`, or Beautiful Soup's `soup.select()` / `soup.select_one()` can force the parser to exceed Python's recursion limit with a small crafted input (about 1.6 KB, roughly 330 nesting levels), raising an uncontrolled `RecursionError`. Because this exception is not part of the parser's documented error contract, applications that catch only `ValueError` or `SelectorSyntaxError` see an unexpected failure of the request or task that parsed the selector.\n\n## Root Cause\n\nThe parser dispatches each opening pseudo-class token to `parse_pseudo_open`, which calls back into `parse_selectors` to parse the pseudo-class body. Every nesting level therefore adds Python stack frames, and no counter, depth guard, or `RecursionError` handler bounds this descent. The token-count guard `SELECTOR_LIMIT = 8192` (added for the earlier comma-separated-list memory issue) counts parsed tokens, not recursion depth; at the failing nesting depth the token count is only about 330, roughly four percent of that limit, so the guard never fires. The security invariant that untrusted selector input must not be able to exhaust interpreter resources is not enforced for nesting depth.\n\n```text\nsoupsieve/css_parser.py\n  CSSParser.parse_pseudo_open (line 985): sel.selectors.append(self.parse_selectors(iselector, index, flags))\n  CSSParser.parse_selectors  (line 1137): recursive target; dispatches pseudo-class tokens back into parse_pseudo_class -> parse_pseudo_open\n  CSSParser.increment_count  (lines 707-712): SELECTOR_LIMIT token guard; increments once per nesting level, cannot bound depth\n```\n\n## Impact\n\nAny application that compiles or evaluates untrusted CSS selectors through Soup Sieve (directly or via Beautiful Soup) is affected. No authentication, privilege, or user interaction is required; the failure occurs during selector parsing, before any document is matched. A single crafted selector of about 1.6 KB reliably raises `RecursionError`. The demonstrated capability is a transient denial of the individual request, task, or invocation that parsed the malicious selector: the exception propagates uncaught unless the caller handles `RecursionError` (or a broad `except Exception`). The `RecursionError` in CPython 3.x is a recoverable stack unwind, not an interpreter crash or persistent resource exhaustion, and it carries no confidentiality or integrity impact. Applications following the parser's documented error pattern (catching `ValueError` / `SelectorSyntaxError`) will not catch it, so a repeated stream of such selectors can plausibly cause repeated per-request failures; this per-request availability effect is the demonstrated consequence, not a service-wide or amplified outage.\n\n## Proof of Concept\n\nRequires only an installed Soup Sieve (any release from 0.4 through 2.10) and a default CPython recursion limit of 1000. No Beautiful Soup document or network setup is needed.\n\n```python\nimport soupsieve as sv\n\n# ~330 levels of nested :is() around a single tag: about 1.6 KB of input.\ndepth = 330\nselector = \":is(\" * depth + \"a\" + \")\" * depth\nprint(\"selector length:\", len(selector))\nsv.compile(selector)\n```\n\n```text\nselector length: 1651\nTraceback (most recent call last):\n  ...\n  File \".../soupsieve/css_parser.py\", line 985, in parse_pseudo_open\n    sel.selectors.append(self.parse_selectors(iselector, index, flags))\nRecursionError: maximum recursion depth exceeded\n```\n\nThe same failure was reproduced with `:not()`, `:where()`, and `:has()`, and through `BeautifulSoup(...).select(selector)`. A negative control at depth 100 compiles successfully with a token count of 101, confirming the token guard is far from firing.\n\n## Attack Chain\n\n1. **Exposure:** The application exposes `soupsieve.compile()` / `select()` or Beautiful Soup's `.select()` / `.select_one()` to attacker-influenced CSS selector input. These are the library's primary public API and ship enabled by default; Soup Sieve is an automatic dependency of Beautiful Soup 4.\n2. **Control:** The attacker fully controls the selector string. The nested pseudo-class pattern (`:is(:is(...a...))`) survives tokenization and normalization unchanged.\n3. **Path:** `compile()` reaches `CSSParser.process_selectors()` and then `parse_selectors()`, which dispatches each pseudo-class token through `parse_pseudo_class()` into `parse_pseudo_open()`, which calls `parse_selectors()` again, once per nesting level.\n4. **Guard:** The only resource guard is the `SELECTOR_LIMIT` token counter, which reaches about 330 at the failing depth versus its limit of 8192, so it never fires. No recursion-depth counter and no `RecursionError` handler exist anywhere in the package.\n5. **Primitive:** Python's recursion limit is exceeded during parsing, raising an uncontrolled `RecursionError`.\n6. **Result:** The unhandled `RecursionError` propagates to the caller, failing the request, task, or process invocation that parsed the selector, outside the parser's documented `ValueError` / `SelectorSyntaxError` error contract.\n\n## Bypass Evidence\n\nThe relevant existing guard is the `SELECTOR_LIMIT = 8192` token counter in `increment_count()`. It does not block this path: it increments once per nesting level, so at the failing depth of about 330 the count is roughly 330 (about four percent of 8192), verified by instrumenting `increment_count` and observing a maximum count of 329 at the point `RecursionError` was raised. A search of the package for `RecursionError` and `RuntimeError` handlers returns no matches, so nothing catches the error internally, and `functools.lru_cache` on the compile path does not cache exceptions. Attempts to invalidate the finding were made and failed: raising the interpreter recursion limit only shifts the required nesting depth (a proportionally larger but still small selector), and a broad `except Exception` in the caller does catch the error but the parser's documented contract raises only `ValueError` / `SelectorSyntaxError`, so callers coded to that contract remain exposed. This is a distinct weakness from the prior comma-separated-list memory-exhaustion advisory: that issue exhausts heap memory through linear object expansion and was addressed by the token count limit, whereas this issue exhausts the call stack through unbounded recursion depth and is not addressed by any released version, including 2.8.4 which was independently confirmed to still raise `RecursionError` on this input.\n\n## Affected Versions\n\n- `Ecosystem: pip (PyPI)`\n- `Package: soupsieve`\n- `Confirmed affected range: >= 0.4, <= 2.10`\n- `Latest release checked: soupsieve 2.10 (PyPI, latest published release as of 2026-09-25)`\n- `Fix status: not fixed in any released version`\n\nThe recursive `parse_pseudo_open` to `parse_selectors` structure is present in the earliest PyPI release (0.4) and in every subsequent release through the current 2.10, verified against the published PyPI source artifacts. Version 2.5, release 2.8.4 (which added that token-count limit), and 2.10 were each executed and confirmed to raise `RecursionError` on the crafted input. No released version adds a recursion-depth limit; the token-count `SELECTOR_LIMIT` introduced in 2.8.4 is architecturally unable to bound nesting depth. There is no registry or tag disagreement and no package or module path change.\n\n## Possible Solution\n\nPython's `RecursionError` is sometimes a contested issue related to security. The Soup Sieve project does not consider it \"uncontrolled\" and allows it to be raised to indicate Python's maximum recursion depth was reached, and allows it to fail to prevent overflows, a much worse and real security vulnerability. With that said, the algorithm can be reworked to be non-recursive, allowing the selector limit check to now capture and raise an exception. In addition, the limit could be exposed to the user to give them better control.\n\n## Mitigation\n\nFor those on older versions where the algorithm is still recursive, a try/except block that captures `RecursionError` can be added around calls if accepting untrusted user input is allowed.\n\n## Note\n\nThis issue was fixed in version 3.0.0, which has been yanked from the PyPI registry. Use versions 3.0.2 and above to upgrade.\n\n---\n\nReported by zx (GitHub: @manus-pi).","affected":[{"package":{"name":"soupsieve","ecosystem":"PyPI","purl":"pkg:pypi/soupsieve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.4"},{"fixed":"3.0.2"}]}],"versions":["0.4","0.5","0.5.1","0.5.2","0.5.3","0.6","1.0","1.0.1","1.0.2","1.0b1","1.0b2","1.1","1.2","1.2.1","1.3","1.3.1","1.4","1.5","1.6","1.6.1","1.6.2","1.7","1.7.1","1.7.2","1.7.3","1.8","1.9","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6","2.0","2.0.1","2.1","2.10","2.2","2.2.1","2.3","2.3.1","2.3.2","2.3.2.post1","2.4","2.4.1","2.5","2.6","2.7","2.8","2.8.1","2.8.2","2.8.3","2.8.4","2.9","2.9.1","2.9.2","3.0","3.0.1"],"database_specific":{"last_known_affected_version_range":"<= 2.10","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-7g44-g9rc-x53w/GHSA-7g44-g9rc-x53w.json"}}],"references":[{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-7g44-g9rc-x53w"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126193"},{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/pull/306"},{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/commit/52de12f157a373614ad0f486d434551c5a4378ee"},{"type":"PACKAGE","url":"https://github.com/facelessuser/soupsieve"},{"type":"WEB","url":"https://github.com/facelessuser/soupsieve/releases/tag/3.0"}],"database_specific":{"cwe_ids":["CWE-674"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T16:34:59Z","nvd_published_at":"2026-11-12T17:17:32Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}
\ No newline at end of file
diff --git a/data/PyPI/GHSA-jv6m-48w5-5rpr.json b/data/PyPI/GHSA-jv6m-48w5-5rpr.json
new file mode 100644
index 0000000000..fcb05cc7fa
--- /dev/null
+++ b/data/PyPI/GHSA-jv6m-48w5-5rpr.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-jv6m-48w5-5rpr","published":"2026-11-13T18:05:15Z","modified":"2026-11-13T18:15:07.541730589Z","aliases":["CVE-2026-128079"],"summary":"envd: Host file disclosure through requirements path traversal and TOCTOU","details":"### Summary\n\nenvd’s `install.python_packages(requirements=...)` could read files outside the build context on the host. Content interpreted as dependency entries could appear in build logs and build-step metadata.\n\nCommit f576c92, released in v1.3.5, added path containment validation but left a time-of-check/time-of-use (TOCTOU) race between symlink resolution and opening the requirements file. Commit 9d575b3 addresses this race by opening requirements files through a directory-rooted filesystem handle.\n\n### Details\n\nenvd reads requirements files on the host to determine whether their contents can be embedded directly into a pip installation build step.\n\nThe vulnerable host-side requirements read was introduced in v0.3.38. Version v1.3.5 added containment checks for static path escapes but remained vulnerable to a TOCTOU race. The complete fix is included in v1.3.6.\n\nBefore f576c92, this host read lacked a build-context containment check. That commit added frontend path validation and a compile-time check using filepath.EvalSymlinks followed by a containment comparison.\n\nHowever, symlink resolution returns a pathname rather than a pinned filesystem object. The subsequent os.Open independently resolves that pathname. Concurrent filesystem changes could therefore invalidate the containment check before the file was opened.\n\nThe complete fix uses os.OpenRoot and Root.Open to enforce containment during filesystem traversal.\n\nResources:\n- first commit: be783264fdd79ad7262cea0485b7d449ca514f80\n- Initial containment fix: f576c92\n- TOCTOU fix: 9d575b3\n\n### Proof of concept\n\nThe security-relevant condition is a requirements-file pathname whose filesystem resolution changes between validation and opening. The containment check describes the filesystem at validation time, while the later pathname-based open may access a different object.\n\nThe fix includes a deterministic regression test for the underlying object-pinning guarantee. It opens a context directory handle, moves that directory, and creates a replacement directory at the original pathname containing different requirements. The rooted reader continues reading the original context; a pathname-based reader reads the replacement.\n\nThis regression test demonstrates the distinction between rooted and pathname-based reads. It is not an end-to-end demonstration of host file disclosure.\n\n### Impact\n\nAn attacker who can influence the build input—and, for the residual race in v1.3.5, concurrently modify the relevant filesystem paths—may cause envd to read files outside the intended build context, subject to the permissions of the envd process.\n\nDepending on the file contents and requirements parsing, information may be exposed through dependency debug logs and build-step metadata. This issue does not establish arbitrary code execution or unrestricted disclosure of every file.\n\nv1.3.5 remains affected by the TOCTOU variant. Earlier versions containing the host requirements-reading behavior are affected by the original containment issue; confirm the earliest affected release before setting the advisory’s version range.\n\nPatched version: v1.3.6.","affected":[{"package":{"name":"envd","ecosystem":"PyPI","purl":"pkg:pypi/envd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.38"},{"fixed":"1.3.6"}]}],"versions":["0.3.38","0.3.39","0.3.40","0.3.42","0.3.43","0.3.44","0.3.45","0.3.46","0.3.47","0.4.0","0.4.1","0.4.3","1.0.0a2","1.0.0a3","1.0.1","1.1.0","1.2.0","1.2.1","1.2.6","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-jv6m-48w5-5rpr/GHSA-jv6m-48w5-5rpr.json"}}],"references":[{"type":"WEB","url":"https://github.com/tensorchord/envd/security/advisories/GHSA-jv6m-48w5-5rpr"},{"type":"WEB","url":"https://github.com/tensorchord/envd/pull/2112"},{"type":"WEB","url":"https://github.com/tensorchord/envd/pull/2119"},{"type":"WEB","url":"https://github.com/tensorchord/envd/commit/9d575b354ce17a02ef9698b6ff0d5d14296c5734"},{"type":"WEB","url":"https://github.com/tensorchord/envd/commit/f576c92c1e6dcb9b00b60995534aeb2a83b0b407"},{"type":"PACKAGE","url":"https://github.com/tensorchord/envd"},{"type":"WEB","url":"https://github.com/tensorchord/envd/releases/tag/v1.3.6"}],"database_specific":{"cwe_ids":["CWE-22","CWE-367"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T18:05:15Z","nvd_published_at":null,"severity":"MODERATE"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
diff --git a/data/PyPI/GHSA-mf5v-w3w3-f6cg.json b/data/PyPI/GHSA-mf5v-w3w3-f6cg.json
new file mode 100644
index 0000000000..aa8b41ecaf
--- /dev/null
+++ b/data/PyPI/GHSA-mf5v-w3w3-f6cg.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-mf5v-w3w3-f6cg","published":"2026-11-13T16:43:18Z","modified":"2026-11-13T17:00:03.925479166Z","aliases":["CVE-2026-126360"],"summary":"OpenTelemetry Python API: Denial of service through quadratic-time traceparent parsing","details":"## Summary\n\n`TraceContextTextMapPropagator.extract()` in `opentelemetry-api` is vulnerable to regular expression denial of service (ReDoS) when processing a specially crafted `traceparent` value.\n\nA malformed value containing a trace-context prefix followed by a long whitespace sequence and an embedded newline triggers quadratic-time regex backtracking. Applications that extract trace context from untrusted carriers accepting such strings can experience excessive CPU consumption and request-processing delays.\n\nWhen extraction runs on an asynchronous server’s event-loop thread, a single malicious message can delay unrelated requests handled by that event loop.\n\n## Exposure conditions\n\nExploitation requires attacker-controlled input to reach the affected propagator through a carrier that preserves embedded newlines and permits a sufficiently large value.\n\nConforming HTTP header values cannot contain embedded newlines. However, OpenTelemetry carriers are not restricted to HTTP headers. JSON strings can contain escaped newlines that become newline characters after decoding.\n\nMCP request metadata is one relevant integration path: applications may extract trace context from JSON `params._meta`. Exposure depends on the MCP SDK or instrumentation version, whether extraction invokes the W3C Trace Context propagator, and applicable message-size limits. HTTP header validation does not constrain a `traceparent` string carried inside a JSON body.\n\nAuthentication requirements depend on the application exposing the carrier.\n\n## Impact\n\nThe demonstrated impact is denial of service through excessive CPU consumption and blocked request processing. Repeated malicious messages may sustain service degradation.\n\nThis finding does not demonstrate data disclosure, data modification, or code execution.\n\n## Remediation\n\nUpgrade `opentelemetry-api` to `1.45.2` or a later release containing the fix.\n\nVersion `1.45.2` rejects `traceparent` values longer than 512 characters before regex matching and removes the overlapping suffix and trailing-whitespace expressions.\n\nWhere upgrading is temporarily unavailable, reject oversized values and embedded CR/LF characters before passing untrusted trace-context values to the affected propagator.","affected":[{"package":{"name":"opentelemetry-api","ecosystem":"PyPI","purl":"pkg:pypi/opentelemetry-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45.2"}]}],"versions":["0.10b0","0.11b0","0.12b0","0.13b0","0.14b0","0.15b0","0.16b0","0.16b1","0.17b0","0.1a0","0.2a0","0.3a0","0.4a0","0.4a1","0.5b0","0.6b0","0.7b0","0.7b1","0.8b0","0.9b0","1.0.0","1.0.0rc1","1.1.0","1.10.0","1.10a0","1.11.0","1.11.1","1.12.0","1.12.0rc1","1.12.0rc2","1.13.0","1.14.0","1.15.0","1.16.0","1.17.0","1.18.0","1.19.0","1.2.0","1.20.0","1.21.0","1.22.0","1.23.0","1.24.0","1.25.0","1.26.0","1.27.0","1.28.0","1.28.1","1.28.2","1.29.0","1.3.0","1.30.0","1.31.0","1.31.1","1.32.0","1.32.1","1.33.0","1.33.1","1.34.0","1.34.1","1.35.0","1.36.0","1.37.0","1.38.0","1.39.0","1.39.1","1.4.0","1.4.1","1.40.0","1.41.0","1.41.1","1.42.0","1.42.1","1.43.0","1.44.0","1.45.0","1.45.1","1.5.0","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.8.0","1.9.0","1.9.1"],"database_specific":{"last_known_affected_version_range":"<= 1.45.1","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-mf5v-w3w3-f6cg/GHSA-mf5v-w3w3-f6cg.json"}}],"references":[{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/security/advisories/GHSA-mf5v-w3w3-f6cg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126360"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/pull/5818"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/pull/5856"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/commit/78123a2755c907c602e02352aebed4be86aa5350"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/commit/faa72dae511ae64a7bf8ca63eff9ad4387d0b939"},{"type":"PACKAGE","url":"https://github.com/open-telemetry/opentelemetry-python"},{"type":"WEB","url":"https://github.com/open-telemetry/opentelemetry-python/releases/tag/v1.45.2"}],"database_specific":{"cwe_ids":["CWE-1333"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T16:43:18Z","nvd_published_at":"2026-11-13T00:20:11Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}
\ No newline at end of file
diff --git a/data/PyPI/MAL-2026-19247.json b/data/PyPI/MAL-2026-19247.json
new file mode 100644
index 0000000000..7624a4a0fa
--- /dev/null
+++ b/data/PyPI/MAL-2026-19247.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19247","published":"2026-11-13T17:50:00Z","modified":"2026-11-13T18:15:06.673106723Z","summary":"Malicious code in testing1345 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (15bab830cd8343859ac220ef87e821719169a4e2ccb50da37032d97ef02c27dd)\nDuring installation, the package downloads and executes a script from a remote location. The server delivers different payload versions, some of them being benign, and others containing next-stage installation. The final payload is a RAT.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-testing1345\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n\n\n - rat\n","affected":[{"package":{"name":"testing1345","ecosystem":"PyPI","purl":"pkg:pypi/testing1345"},"versions":["0.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/testing1345/MAL-2026-19247.json"}}],"references":[{"type":"EVIDENCE","url":"https://tria.ge/261113-wal5qset2s"},{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/ce97b675a86bfff5e73e218e8d9d17458857d2328b1b55acd87f644001ca865f/detection"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/testing1345"}],"database_specific":{"iocs":{"domains":["helper-exe.vercel.app"],"urls":["https://helper-exe.vercel.app/hello.bat","https://file.garden/autlsl_4glu4x2U5/c_b8a1b1.zip","https://file.garden/autlsl_4glu4x2U5/m_7cf722","https://pomf2.lain.la/f/qj4sh0sj.png"]},"malicious-packages-origins":[{"id":"pypi/2026-11-testing1345/testing1345","import_time":"2026-11-13T18:12:41.089861858Z","modified_time":"2026-11-13T17:50:00.683461Z","sha256":"15bab830cd8343859ac220ef87e821719169a4e2ccb50da37032d97ef02c27dd","source":"kam193","versions":["0.1.0"]}]},"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}
\ No newline at end of file
diff --git a/data/RubyGems/GHSA-cpgf-5mjf-73p7.json b/data/RubyGems/GHSA-cpgf-5mjf-73p7.json
new file mode 100644
index 0000000000..956aca2f79
--- /dev/null
+++ b/data/RubyGems/GHSA-cpgf-5mjf-73p7.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-cpgf-5mjf-73p7","published":"2026-11-13T17:54:38Z","modified":"2026-11-13T18:00:04.418301666Z","aliases":["CVE-2026-128068"],"summary":"rails-html-sanitizer: Possible regular expression denial of service with certain configurations","details":"## Summary\n\n`Rails::HTML::PermitScrubber` restricts the `href` and `xlink:href` attributes of SVG reference elements to local references. That check matched the attribute value against `/^\\s*[^#\\s].*/m`. In Ruby `^` anchors to every line start and `\\s` matches newlines, so an all-whitespace value made the engine rescan the value from each of its line starts, taking time quadratic in its length.\n\n- Versions affected: `>= 1.0.3, < 1.7.2`\n- Not affected: `< 1.0.3`\n- Fixed versions: `1.7.2`\n\nOnly Ruby 3.1 and earlier are affected. Ruby 3.2 added linear-time regexp matching, which makes the pattern linear.\n\n## Impact\n\nAn attacker who supplies HTML to be sanitized can consume CPU out of proportion to the input size, by sending an SVG reference element whose `href` or `xlink:href` is a long run of whitespace.\n\nApplications are affected only when the allowed tags are overridden to include an SVG reference element such as `use`, along with `href` or `xlink:href` in the allowed attributes. The default allowed tags include no SVG elements, so the default configuration is not affected. Applications that use Loofah directly are exposed through its own copy of the check, fixed in Loofah 2.25.3.\n\n## Workarounds\n\nRun Ruby 3.2 or later, which matches the pattern in linear time, or remove the SVG reference elements from the overridden allowed tags.\n\n## Credit\n\nReported by scyoon through the Rails HackerOne program.","affected":[{"package":{"name":"rails-html-sanitizer","ecosystem":"RubyGems","purl":"pkg:gem/rails-html-sanitizer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.3"},{"fixed":"1.7.2"}]}],"versions":["1.0.3","1.0.4","1.1.0","1.2.0","1.3.0","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.5.0","1.6.0","1.6.0.rc1","1.6.0.rc2","1.6.1","1.6.2","1.7.0","1.7.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-cpgf-5mjf-73p7/GHSA-cpgf-5mjf-73p7.json"}}],"references":[{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-cpgf-5mjf-73p7"},{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/commit/f776f963b9d9346271aade9cb903e793fd38e865"},{"type":"PACKAGE","url":"https://github.com/rails/rails-html-sanitizer"},{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/releases/tag/v1.7.2"},{"type":"WEB","url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/GHSA-cpgf-5mjf-73p7.yml"}],"database_specific":{"cwe_ids":["CWE-1333","CWE-400"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T17:54:38Z","nvd_published_at":null,"severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}
\ No newline at end of file
diff --git a/data/RubyGems/GHSA-h7wh-q2qr-458c.json b/data/RubyGems/GHSA-h7wh-q2qr-458c.json
new file mode 100644
index 0000000000..88d6ce5abd
--- /dev/null
+++ b/data/RubyGems/GHSA-h7wh-q2qr-458c.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-h7wh-q2qr-458c","published":"2026-11-13T18:09:16Z","modified":"2026-11-13T18:15:07.508143617Z","aliases":["CVE-2026-128069"],"summary":"rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent calls","details":"## Summary\n\n`Rails::HTML::SafeListSanitizer` (both the HTML4 and HTML5 variants) shares one `Rails::HTML::PermitScrubber` across every `sanitize` call on the same instance, assigning its `tags` and `attributes` on each call without synchronization. Two concurrent `sanitize` calls with different `tags:` or `attributes:` options can interleave, so one call is scrubbed with the other call's allowlist.\n\n- Versions affected: `< 1.7.2`\n- Not affected: none\n- Fixed versions: `1.7.2`\n\n## Impact\n\nAction View memoizes a single `SafeListSanitizer` per helper module and uses it for every `sanitize` call in the process, so in a multi-threaded server (for example Puma) all requests share the same `PermitScrubber`. If any code path calls `sanitize` with a more permissive allowlist, an attacker who can trigger that path concurrently with another request can cause the other request to be sanitized with the permissive allowlist. If the permissive allowlist admits `script` or an event-handler attribute, the strict call emits it unchanged, which is a cross-site scripting vector when the strict output is stored or rendered to other users.\n\nApplications are affected only if they run more than one thread per process and some `sanitize` call passes `tags:` or `attributes:` options that differ from another call's, including a call that passes no options and so uses the defaults. Applications that use a single configuration everywhere, pass their own `scrubber:`, or run single-threaded are not affected.\n\n## Workarounds\n\nUse the same allowlist for every `sanitize` call, or pass a `scrubber:` built per call (`Rails::HTML::PermitScrubber.new` with `tags=` and `attributes=` set) instead of `tags:` and `attributes:` options.\n\n## Credit\n\nReported by hiumee via HackerOne.","affected":[{"package":{"name":"rails-html-sanitizer","ecosystem":"RubyGems","purl":"pkg:gem/rails-html-sanitizer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.1.0","1.2.0","1.3.0","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.5.0","1.6.0","1.6.0.rc1","1.6.0.rc2","1.6.1","1.6.2","1.7.0","1.7.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-h7wh-q2qr-458c/GHSA-h7wh-q2qr-458c.json"}}],"references":[{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-h7wh-q2qr-458c"},{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/issues/228"},{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/commit/15f764c3563d5dd9b97ad32eaa7454577ccec4b9"},{"type":"PACKAGE","url":"https://github.com/rails/rails-html-sanitizer"},{"type":"WEB","url":"https://github.com/rails/rails-html-sanitizer/releases/tag/v1.7.2"},{"type":"WEB","url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/GHSA-h7wh-q2qr-458c.yml"}],"database_specific":{"cwe_ids":["CWE-362","CWE-79"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T18:09:16Z","nvd_published_at":null,"severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}
\ No newline at end of file
diff --git a/data/RubyGems/MAL-2026-19242.json b/data/RubyGems/MAL-2026-19242.json
new file mode 100644
index 0000000000..910980970a
--- /dev/null
+++ b/data/RubyGems/MAL-2026-19242.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19242","published":"2026-11-13T17:05:51Z","modified":"2026-11-13T17:15:07.470941612Z","summary":"Malicious code in tdesign-vue-mono (RubyGems)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (b0cfa1af4f0cec458d6f289661f3d1791a2b8a484169b83ce9ec1ca78697f6e9)\nThe OpenSSF Package Analysis project identified 'tdesign-vue-mono' @ 1.0.1 (rubygems) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"name":"tdesign-vue-mono","ecosystem":"RubyGems","purl":"pkg:gem/tdesign-vue-mono"},"versions":["1.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/tdesign-vue-mono/MAL-2026-19242.json"}}],"database_specific":{"malicious-packages-origins":[{"import_time":"2026-11-13T17:10:38.754362288Z","modified_time":"2026-11-13T17:05:51Z","sha256":"b0cfa1af4f0cec458d6f289661f3d1791a2b8a484169b83ce9ec1ca78697f6e9","source":"ossf-package-analysis","versions":["1.0.1"]}]},"credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}
\ No newline at end of file
diff --git a/data/crates.io/GHSA-5hq8-qhww-jm7q.json b/data/crates.io/GHSA-5hq8-qhww-jm7q.json
index 5b616b20dc..ed3aa807f4 100644
--- a/data/crates.io/GHSA-5hq8-qhww-jm7q.json
+++ b/data/crates.io/GHSA-5hq8-qhww-jm7q.json
@@ -1 +1 @@
-{"schema_version":"1.9.0","id":"GHSA-5hq8-qhww-jm7q","published":"2026-09-15T20:01:17Z","modified":"2026-09-15T20:15:04.814697144Z","aliases":["CVE-2026-61544"],"summary":"libp2p-quic: Remote panic via certificate expiry race during QUIC handshake","details":"### Summary\n\n`libp2p-quic` can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp2p TLS certificate and delays the final TLS 1.3 handshake fragment until the certificate expires.\n\nThis is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener.\n\n### Details\nDuring the TLS handshake, `libp2p-tls` parses and validates the peer certificate. After Quinn reports handshake completion, `libp2p-quic` re-parses the same certificate in the post-handshake upgrade path and assumes this cannot fail:\n\nhttps://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66\n\nHowever, `libp2p_tls::certificate::parse()` re-runs certificate verification on every call, including a wall-clock validity check. A certificate that was valid during the first handshake time parse can expire before the second post-handshake parse, causing the `expect(...)` to panic.\n\n\n### PoC\nA malicious peer can trigger this by:\n1. Opening a QUIC connection to a libp2p QUIC listener.\n2. Presenting a valid libp2p TLS certificate with a very short lifetime.\n3. Allowing the initial handshake-time certificate validation to succeed.\n4. Withholding the final client handshake fragment packet until after the certificate expires, but before the QUIC handshake timeout elapses.\n5. The listener completes the handshake and hits the post-handshake certificate re-parse, which panics.\n\n### Impact\nRemote unauthenticated denial of service. Any application exposing an affected `libp2p-quic` listener can be crashed by a network peer that performs a valid-looking QUIC/TLS handshake with attacker-controlled timing. No malformed packets are required.","affected":[{"package":{"name":"libp2p-quic","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-quic"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.13.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/09/GHSA-5hq8-qhww-jm7q/GHSA-5hq8-qhww-jm7q.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/pull/6525"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":[],"github_reviewed":true,"github_reviewed_at":"2026-09-15T20:01:17Z","nvd_published_at":null,"severity":"HIGH"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
+{"schema_version":"1.9.0","id":"GHSA-5hq8-qhww-jm7q","published":"2026-09-15T20:01:17Z","modified":"2026-11-13T12:56:08.635291670Z","aliases":["CVE-2026-61544","RUSTSEC-2026-0525"],"summary":"libp2p-quic: Remote panic via certificate expiry race during QUIC handshake","details":"### Summary\n\n`libp2p-quic` can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp2p TLS certificate and delays the final TLS 1.3 handshake fragment until the certificate expires.\n\nThis is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener.\n\n### Details\nDuring the TLS handshake, `libp2p-tls` parses and validates the peer certificate. After Quinn reports handshake completion, `libp2p-quic` re-parses the same certificate in the post-handshake upgrade path and assumes this cannot fail:\n\nhttps://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66\n\nHowever, `libp2p_tls::certificate::parse()` re-runs certificate verification on every call, including a wall-clock validity check. A certificate that was valid during the first handshake time parse can expire before the second post-handshake parse, causing the `expect(...)` to panic.\n\n\n### PoC\nA malicious peer can trigger this by:\n1. Opening a QUIC connection to a libp2p QUIC listener.\n2. Presenting a valid libp2p TLS certificate with a very short lifetime.\n3. Allowing the initial handshake-time certificate validation to succeed.\n4. Withholding the final client handshake fragment packet until after the certificate expires, but before the QUIC handshake timeout elapses.\n5. The listener completes the handshake and hits the post-handshake certificate re-parse, which panics.\n\n### Impact\nRemote unauthenticated denial of service. Any application exposing an affected `libp2p-quic` listener can be crashed by a network peer that performs a valid-looking QUIC/TLS handshake with attacker-controlled timing. No malformed packets are required.","affected":[{"package":{"name":"libp2p-quic","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-quic"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.13.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/09/GHSA-5hq8-qhww-jm7q/GHSA-5hq8-qhww-jm7q.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/pull/6525"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":[],"github_reviewed":true,"github_reviewed_at":"2026-09-15T20:01:17Z","nvd_published_at":null,"severity":"HIGH"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
diff --git a/data/crates.io/GHSA-cqfx-gf56-8x59.json b/data/crates.io/GHSA-cqfx-gf56-8x59.json
index ec1ebe6400..2e39dc03a3 100644
--- a/data/crates.io/GHSA-cqfx-gf56-8x59.json
+++ b/data/crates.io/GHSA-cqfx-gf56-8x59.json
@@ -1 +1 @@
-{"schema_version":"1.9.0","id":"GHSA-cqfx-gf56-8x59","published":"2026-04-04T06:33:46Z","modified":"2026-06-09T10:45:13.923189467Z","aliases":["CVE-2026-35405"],"summary":"libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers","details":"### Summary\nfound that `libp2p-rendezvous` server has no limit on how many namespaces a single peer can register. a malicious peer can just keep registering unique namespaces in a loop and the server happily accepts every single one  allocating memory for each registration with no pushback. keep doing this long enough (or with multiple sybil peers) and the server process gets OOM killed.\n\nno auth required. any peer on the network can do this.\n\n\n\n### Details\n\nthe bug is in `Registrations::add()` inside `protocols/rendezvous/src/server.rs`.\n\nthe store uses a BiMap keyed on `(PeerId, Namespace)`  so yes, a peer can't register the *same* namespace twice. but there's nothing stopping it from registering 10,000 *different* namespaces. each unique one gets its own entry in:\n\n- `registrations_for_peer` (BiMap)\n- `registrations` (HashMap)\n- `next_expiry` (FuturesUnordered  a new heap-allocated BoxFuture per registration)\n\nnamespace strings are only validated for length (`MAX_NAMESPACE = 255`), not count. there's no `max_registrations_per_peer` anywhere in `Config` or the rest of the codebase.\n\nmaking it worse  `MAX_TTL = 72 hours`. so every registration just sits there for up to 3 days. disconnecting doesn't clean anything up either, entries only go away when the TTL fires.\n\n```\nprotocols/rendezvous/src/server.rs\n  └── Registrations::add()   ← no per-peer count check anywhere\n\nprotocols/rendezvous/src/lib.rs\n  ├── MAX_NAMESPACE = 255    ← length capped, count is not\n  └── MAX_TTL = 72h          ← entries persist a long time\n```\n\nfix would be adding something like `max_registrations_per_peer` to `Config` and checking it at the top of `add()` before inserting anything.\n\n\n\n### PoC\n\ntested on `libp2p v0.56.1`, built from source.\n\n**step 1** -  start the rendezvous server (uses the example from the repo):\n```bash\ncargo run --manifest-path examples/rendezvous/Cargo.toml --bin rendezvous-example\n```\n\n**step 2** -  run the flood client (attached as `rzv-flood.rs`):\n```bash\ncargo run --manifest-path examples/rendezvous/Cargo.toml --bin rzv-flood\n```\n\nit connects as a single peer and registers 10,000 unique namespaces (`flood-00000000` through `flood-00009999`), chaining each registration on the confirmed `Registered` event from the previous one.\n\nserver accepted every single one. not one rejection.\n\nmemory on the server side (via `ps aux` RSS column):\n\n```\nbaseline:       ~18 MB\nmid flood:      ~26 MB  \nafter 10k regs: ~28 MB\n```\n\nthat's from one peer. scale to 100 sybil peers doing the same thing and you're looking at ~1GB. 1000 peers and the server is dead.\n\n<img width=\"1032\" height=\"124\" alt=\"image\" src=\"https://github.com/user-attachments/assets/f778f179-2aa1-4485-940c-25e218733fa8\" />\n\n*server RSS climbing during the flood*\n\n<img width=\"553\" height=\"760\" alt=\"image\" src=\"https://github.com/user-attachments/assets/691b0f52-dda0-443f-a3c2-98c8c6336f2f\" />\n\n*10,000 registrations confirmed, zero rejected*\n\n\n\n### Impact\n\nany node running libp2p-rendezvous server-side is affected. rendezvous servers are typically well-known, publicly reachable nodes  taking one down disrupts peer discovery for all clients depending on it. any rust-libp2p based project that deploys a rendezvous point is at risk.\n\nno special position on the network needed. no crypto work. just open a connection and send REGISTER in a loop.\n\n## **Researchers**\n\n**Discovered by:**\n- Ramesh Adhikari (CoE-CNDS Lab, VJTI, Mumbai, India)\n- Dr. Faruk Kazi (CoE-CNDS Lab, VJTI, Mumbai, India)\n\n\n\n**Organization:** Centre of Excellence in Complex & Nonlinear Dynamical Systems (CoE-CNDS Lab), Veermata Jijabai Technological Institute (VJTI), Mumbai, India\n\n---\n\nWe have not disclosed this to any other vendor or made it public. We are reporting directly to the [rust-libp2p](https://github.com/libp2p/rust-libp2p) security team through this advisory.","affected":[{"package":{"name":"libp2p-rendezvous","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-rendezvous"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-cqfx-gf56-8x59/GHSA-cqfx-gf56-8x59.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-cqfx-gf56-8x59"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35405"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-770"],"github_reviewed":true,"github_reviewed_at":"2026-04-04T06:33:46Z","nvd_published_at":"2026-04-07T15:17:43Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}
\ No newline at end of file
+{"schema_version":"1.9.0","id":"GHSA-cqfx-gf56-8x59","published":"2026-04-04T06:33:46Z","modified":"2026-11-13T12:55:58.239822452Z","aliases":["CVE-2026-35405","RUSTSEC-2026-0526"],"summary":"libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers","details":"### Summary\nfound that `libp2p-rendezvous` server has no limit on how many namespaces a single peer can register. a malicious peer can just keep registering unique namespaces in a loop and the server happily accepts every single one  allocating memory for each registration with no pushback. keep doing this long enough (or with multiple sybil peers) and the server process gets OOM killed.\n\nno auth required. any peer on the network can do this.\n\n\n\n### Details\n\nthe bug is in `Registrations::add()` inside `protocols/rendezvous/src/server.rs`.\n\nthe store uses a BiMap keyed on `(PeerId, Namespace)`  so yes, a peer can't register the *same* namespace twice. but there's nothing stopping it from registering 10,000 *different* namespaces. each unique one gets its own entry in:\n\n- `registrations_for_peer` (BiMap)\n- `registrations` (HashMap)\n- `next_expiry` (FuturesUnordered  a new heap-allocated BoxFuture per registration)\n\nnamespace strings are only validated for length (`MAX_NAMESPACE = 255`), not count. there's no `max_registrations_per_peer` anywhere in `Config` or the rest of the codebase.\n\nmaking it worse  `MAX_TTL = 72 hours`. so every registration just sits there for up to 3 days. disconnecting doesn't clean anything up either, entries only go away when the TTL fires.\n\n```\nprotocols/rendezvous/src/server.rs\n  └── Registrations::add()   ← no per-peer count check anywhere\n\nprotocols/rendezvous/src/lib.rs\n  ├── MAX_NAMESPACE = 255    ← length capped, count is not\n  └── MAX_TTL = 72h          ← entries persist a long time\n```\n\nfix would be adding something like `max_registrations_per_peer` to `Config` and checking it at the top of `add()` before inserting anything.\n\n\n\n### PoC\n\ntested on `libp2p v0.56.1`, built from source.\n\n**step 1** -  start the rendezvous server (uses the example from the repo):\n```bash\ncargo run --manifest-path examples/rendezvous/Cargo.toml --bin rendezvous-example\n```\n\n**step 2** -  run the flood client (attached as `rzv-flood.rs`):\n```bash\ncargo run --manifest-path examples/rendezvous/Cargo.toml --bin rzv-flood\n```\n\nit connects as a single peer and registers 10,000 unique namespaces (`flood-00000000` through `flood-00009999`), chaining each registration on the confirmed `Registered` event from the previous one.\n\nserver accepted every single one. not one rejection.\n\nmemory on the server side (via `ps aux` RSS column):\n\n```\nbaseline:       ~18 MB\nmid flood:      ~26 MB  \nafter 10k regs: ~28 MB\n```\n\nthat's from one peer. scale to 100 sybil peers doing the same thing and you're looking at ~1GB. 1000 peers and the server is dead.\n\n<img width=\"1032\" height=\"124\" alt=\"image\" src=\"https://github.com/user-attachments/assets/f778f179-2aa1-4485-940c-25e218733fa8\" />\n\n*server RSS climbing during the flood*\n\n<img width=\"553\" height=\"760\" alt=\"image\" src=\"https://github.com/user-attachments/assets/691b0f52-dda0-443f-a3c2-98c8c6336f2f\" />\n\n*10,000 registrations confirmed, zero rejected*\n\n\n\n### Impact\n\nany node running libp2p-rendezvous server-side is affected. rendezvous servers are typically well-known, publicly reachable nodes  taking one down disrupts peer discovery for all clients depending on it. any rust-libp2p based project that deploys a rendezvous point is at risk.\n\nno special position on the network needed. no crypto work. just open a connection and send REGISTER in a loop.\n\n## **Researchers**\n\n**Discovered by:**\n- Ramesh Adhikari (CoE-CNDS Lab, VJTI, Mumbai, India)\n- Dr. Faruk Kazi (CoE-CNDS Lab, VJTI, Mumbai, India)\n\n\n\n**Organization:** Centre of Excellence in Complex & Nonlinear Dynamical Systems (CoE-CNDS Lab), Veermata Jijabai Technological Institute (VJTI), Mumbai, India\n\n---\n\nWe have not disclosed this to any other vendor or made it public. We are reporting directly to the [rust-libp2p](https://github.com/libp2p/rust-libp2p) security team through this advisory.","affected":[{"package":{"name":"libp2p-rendezvous","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-rendezvous"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-cqfx-gf56-8x59/GHSA-cqfx-gf56-8x59.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-cqfx-gf56-8x59"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35405"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-770"],"github_reviewed":true,"github_reviewed_at":"2026-04-04T06:33:46Z","nvd_published_at":"2026-04-07T15:17:43Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}
\ No newline at end of file
diff --git a/data/crates.io/GHSA-gc42-3jg7-rxr2.json b/data/crates.io/GHSA-gc42-3jg7-rxr2.json
index 7e0acb650d..1156055543 100644
--- a/data/crates.io/GHSA-gc42-3jg7-rxr2.json
+++ b/data/crates.io/GHSA-gc42-3jg7-rxr2.json
@@ -1 +1 @@
-{"schema_version":"1.9.0","id":"GHSA-gc42-3jg7-rxr2","published":"2026-03-18T19:54:12Z","modified":"2026-03-20T21:34:48.742824Z","aliases":["CVE-2026-33040"],"summary":"Gossipsub PRUNE.backoff Duration Overflow","details":"### Summary\nThe Rust libp2p Gossipsub implementation accepts attacker-controlled PRUNE backoff values and may perform unchecked time arithmetic when storing backoff state.\nA specially crafted PRUNE control message with an extremely large backoff (e.g. u64::MAX) can lead to Duration/Instant overflow during backoff update logic, triggering a panic in the networking state machine. This is remotely reachable over a normal libp2p connection and does not require authentication.\n\n### Attack Scenario\nAn attacker that can establish a libp2p Gossipsub session with a target node can crash the target by sending a single crafted PRUNE control message:\n1. Establish a standard libp2p transport session and negotiate a stream multiplexer.\n2. Open a Gossipsub stream and negotiate the meshsub protocol.\n3. Send one protobuf RPC containing ControlPrune with a very large backoff value (e.g. 18446744073709551615 / u64::MAX).\nWhen processed, the oversized backoff can reach time-update logic that adds Duration::from_secs(backoff) to Instant::now(), causing overflow and panic.\n\n### Impact\nRemote unauthenticated denial of service.\nAny application exposing a libp2p Gossipsub listener and using the affected backoff-handling path can be crashed by a network attacker that can reach the service port. The attack can be repeated by reconnecting and replaying the crafted control message.\n### Patches\nUsers should upgrade to a release that hardens Gossipsub backoff handling.\n\nThis vulnerability was originally submitted by @revofusion to the Ethereum Foundation bug bounty program","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.49.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-gc42-3jg7-rxr2/GHSA-gc42-3jg7-rxr2.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-gc42-3jg7-rxr2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33040"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-190"],"github_reviewed":true,"github_reviewed_at":"2026-03-18T19:54:12Z","nvd_published_at":"2026-03-20T06:16:12Z","severity":"HIGH"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
+{"schema_version":"1.9.0","id":"GHSA-gc42-3jg7-rxr2","published":"2026-03-18T19:54:12Z","modified":"2026-11-13T12:56:06.349370229Z","aliases":["CVE-2026-33040","RUSTSEC-2026-0535"],"summary":"Gossipsub PRUNE.backoff Duration Overflow","details":"### Summary\nThe Rust libp2p Gossipsub implementation accepts attacker-controlled PRUNE backoff values and may perform unchecked time arithmetic when storing backoff state.\nA specially crafted PRUNE control message with an extremely large backoff (e.g. u64::MAX) can lead to Duration/Instant overflow during backoff update logic, triggering a panic in the networking state machine. This is remotely reachable over a normal libp2p connection and does not require authentication.\n\n### Attack Scenario\nAn attacker that can establish a libp2p Gossipsub session with a target node can crash the target by sending a single crafted PRUNE control message:\n1. Establish a standard libp2p transport session and negotiate a stream multiplexer.\n2. Open a Gossipsub stream and negotiate the meshsub protocol.\n3. Send one protobuf RPC containing ControlPrune with a very large backoff value (e.g. 18446744073709551615 / u64::MAX).\nWhen processed, the oversized backoff can reach time-update logic that adds Duration::from_secs(backoff) to Instant::now(), causing overflow and panic.\n\n### Impact\nRemote unauthenticated denial of service.\nAny application exposing a libp2p Gossipsub listener and using the affected backoff-handling path can be crashed by a network attacker that can reach the service port. The attack can be repeated by reconnecting and replaying the crafted control message.\n### Patches\nUsers should upgrade to a release that hardens Gossipsub backoff handling.\n\nThis vulnerability was originally submitted by @revofusion to the Ethereum Foundation bug bounty program","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.49.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-gc42-3jg7-rxr2/GHSA-gc42-3jg7-rxr2.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-gc42-3jg7-rxr2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33040"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-190"],"github_reviewed":true,"github_reviewed_at":"2026-03-18T19:54:12Z","nvd_published_at":"2026-03-20T06:16:12Z","severity":"HIGH"},"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
diff --git a/data/crates.io/GHSA-v5hw-cv9c-rpg7.json b/data/crates.io/GHSA-v5hw-cv9c-rpg7.json
index 76dcdca6c8..3fafb03fa2 100644
--- a/data/crates.io/GHSA-v5hw-cv9c-rpg7.json
+++ b/data/crates.io/GHSA-v5hw-cv9c-rpg7.json
@@ -1 +1 @@
-{"schema_version":"1.9.0","id":"GHSA-v5hw-cv9c-rpg7","published":"2026-04-04T06:34:29Z","modified":"2026-04-07T20:21:43.969674Z","aliases":["CVE-2026-35457"],"summary":"libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion","details":"### Summary\nThe rendezvous server stores pagination cookies without bounds. An unauthenticated peer can repeatedly issue `DISCOVER` requests and force unbounded memory growth.\n\n### Details\n\nPagination state is stored in:\n\n```rs\nHashMap<Cookie, HashSet<RegistrationId>>\n```\n\nOn `Message::Discover`:\n\n```\nremote peer\n→ DISCOVER\n→ handle_request\n→ registrations.get(...)\n→ new cookie generated\n→ cookie inserted into Registrations::cookies\n```\n\nThere is **no upper bound or eviction policy**, so repeated DISCOVER requests grow this map indefinitely.\n\n\n### PoC\nA reproduction test and minimal harness will be provided in a private fork in a follow-up comment.\n\n### Impact\n\n**Remote state amplification leading to memory exhaustion.**\n\n\nProperties:\n\n- etwork reachable\n- no authentication required\n- low attack complexity\n- protocol-compliant traffic\n\nImpacts rendezvous nodes exposed to untrusted peers.\n---\n\n### Possible Fixes\n\n1. **Global cap + eviction**\n\nBound cookie storage (`MAX_COOKIES_TRACKED`) with FIFO/expiry aware eviction.  \nTradeoff: attacker can churn cookies and evict legitimate pagination state.\n\n2. **Stateless cookies**\n\nEncode pagination state in authenticated cookies instead of storing server-side state.  \nTradeoff: more complex implementation.\n\n3. **Rate limiting / per-peer quotas**\n\nLimit cookie creation per peer.  \nTradeoff: requires peer tracking.","affected":[{"package":{"name":"libp2p-rendezvous","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-rendezvous"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-v5hw-cv9c-rpg7/GHSA-v5hw-cv9c-rpg7.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-v5hw-cv9c-rpg7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35457"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-770"],"github_reviewed":true,"github_reviewed_at":"2026-04-04T06:34:29Z","nvd_published_at":"2026-04-07T15:17:43Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}]}
\ No newline at end of file
+{"schema_version":"1.9.0","id":"GHSA-v5hw-cv9c-rpg7","published":"2026-04-04T06:34:29Z","modified":"2026-11-13T12:55:33.337873475Z","aliases":["CVE-2026-35457","RUSTSEC-2026-0527"],"summary":"libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion","details":"### Summary\nThe rendezvous server stores pagination cookies without bounds. An unauthenticated peer can repeatedly issue `DISCOVER` requests and force unbounded memory growth.\n\n### Details\n\nPagination state is stored in:\n\n```rs\nHashMap<Cookie, HashSet<RegistrationId>>\n```\n\nOn `Message::Discover`:\n\n```\nremote peer\n→ DISCOVER\n→ handle_request\n→ registrations.get(...)\n→ new cookie generated\n→ cookie inserted into Registrations::cookies\n```\n\nThere is **no upper bound or eviction policy**, so repeated DISCOVER requests grow this map indefinitely.\n\n\n### PoC\nA reproduction test and minimal harness will be provided in a private fork in a follow-up comment.\n\n### Impact\n\n**Remote state amplification leading to memory exhaustion.**\n\n\nProperties:\n\n- etwork reachable\n- no authentication required\n- low attack complexity\n- protocol-compliant traffic\n\nImpacts rendezvous nodes exposed to untrusted peers.\n---\n\n### Possible Fixes\n\n1. **Global cap + eviction**\n\nBound cookie storage (`MAX_COOKIES_TRACKED`) with FIFO/expiry aware eviction.  \nTradeoff: attacker can churn cookies and evict legitimate pagination state.\n\n2. **Stateless cookies**\n\nEncode pagination state in authenticated cookies instead of storing server-side state.  \nTradeoff: more complex implementation.\n\n3. **Rate limiting / per-peer quotas**\n\nLimit cookie creation per peer.  \nTradeoff: requires peer tracking.","affected":[{"package":{"name":"libp2p-rendezvous","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-rendezvous"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-v5hw-cv9c-rpg7/GHSA-v5hw-cv9c-rpg7.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-v5hw-cv9c-rpg7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35457"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-770"],"github_reviewed":true,"github_reviewed_at":"2026-04-04T06:34:29Z","nvd_published_at":"2026-04-07T15:17:43Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}]}
\ No newline at end of file
diff --git a/data/crates.io/GHSA-v653-r55g-hcmg.json b/data/crates.io/GHSA-v653-r55g-hcmg.json
index baceb86ea5..3952da0992 100644
--- a/data/crates.io/GHSA-v653-r55g-hcmg.json
+++ b/data/crates.io/GHSA-v653-r55g-hcmg.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"GHSA-v653-r55g-hcmg","published":"2026-02-27T09:30:29Z","modified":"2026-11-04T06:45:04.325296987Z","aliases":["CVE-2025-13327","GHSA-pqhf-p39g-3x64","PYSEC-2026-2295"],"summary":"uv has ZIP payload obfuscation through parsing differentials","details":"A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package.","affected":[{"package":{"name":"uv","ecosystem":"crates.io","purl":"pkg:cargo/uv"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.9.6"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-v653-r55g-hcmg/GHSA-v653-r55g-hcmg.json"}}],"references":[{"type":"WEB","url":"https://github.com/astral-sh/uv/security/advisories/GHSA-pqhf-p39g-3x64"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13327"},{"type":"WEB","url":"https://github.com/astral-sh/uv/commit/da659fee4898a73dbc75070f3e82d49f745e4628"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:91219"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:91232"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:91236"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:94459"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:94476"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2025-13327"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407263"},{"type":"PACKAGE","url":"https://github.com/astral-sh/uv"}],"database_specific":{"cwe_ids":["CWE-1286"],"github_reviewed":true,"github_reviewed_at":"2026-03-01T01:03:07Z","nvd_published_at":"2026-02-27T08:17:04Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"GHSA-v653-r55g-hcmg","published":"2026-02-27T09:30:29Z","modified":"2026-11-13T15:45:05.127359529Z","aliases":["CVE-2025-13327","GHSA-pqhf-p39g-3x64","PYSEC-2026-2295"],"summary":"uv has ZIP payload obfuscation through parsing differentials","details":"A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package.","affected":[{"package":{"name":"uv","ecosystem":"crates.io","purl":"pkg:cargo/uv"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.9.6"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-v653-r55g-hcmg/GHSA-v653-r55g-hcmg.json"}}],"references":[{"type":"WEB","url":"https://github.com/astral-sh/uv/security/advisories/GHSA-pqhf-p39g-3x64"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13327"},{"type":"WEB","url":"https://github.com/astral-sh/uv/commit/da659fee4898a73dbc75070f3e82d49f745e4628"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:91219"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:91232"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:91236"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:94459"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:94476"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:96400"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:96403"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:96406"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2025-13327"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407263"},{"type":"PACKAGE","url":"https://github.com/astral-sh/uv"}],"database_specific":{"cwe_ids":["CWE-1286"],"github_reviewed":true,"github_reviewed_at":"2026-03-01T01:03:07Z","nvd_published_at":"2026-02-27T08:17:04Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H"}]}
\ No newline at end of file
diff --git a/data/crates.io/GHSA-xqmp-fxgv-xvq5.json b/data/crates.io/GHSA-xqmp-fxgv-xvq5.json
index 212937e619..608b501cf7 100644
--- a/data/crates.io/GHSA-xqmp-fxgv-xvq5.json
+++ b/data/crates.io/GHSA-xqmp-fxgv-xvq5.json
@@ -1 +1 @@
-{"schema_version":"1.9.0","id":"GHSA-xqmp-fxgv-xvq5","published":"2026-03-30T13:04:03Z","modified":"2026-04-06T23:34:56.143916Z","aliases":["CVE-2026-34219"],"summary":"libp2p-gossipsub: Remote crash via unchecked Instant overflow in heartbeat backoff expiry handling","details":"## Description\n### Summary\nThe Rust libp2p Gossipsub implementation contains a remotely reachable panic in `backoff` expiry handling.  \nAfter a peer sends a crafted `PRUNE` control message with an attacker-controlled, near-maximum `backoff` value, the value is accepted and stored as an `Instant` near the representable upper bound. On a later heartbeat, the implementation performs unchecked `Instant + Duration` arithmetic (`backoff_time + slack`), which can overflow and panic with:\n`overflow when adding duration to instant`\nThis issue is reachable from any Gossipsub peer over normal `TCP + Noise + mplex/yamux` connectivity and requires no further authentication beyond becoming a protocol peer.\n### Attack Scenario\nAn attacker that can establish a libp2p Gossipsub session with a target node can crash the target by sending crafted `PRUNE` control data:\n1. Establish a standard libp2p session (`TCP + Noise`) and negotiate a stream multiplexer (`mplex`/`yamux`).\n2. Open a Gossipsub stream and send an RPC containing `ControlPrune` with a very large `backoff` (chosen near boundary conditions, e.g. `~ i64::MAX - victim_uptime_seconds`; example observed: `9223372036854674580` for ~28h uptime).\n3. The value is parsed from protobuf and passed through `Behaviour::handle_prune()` into mesh/backoff update logic.\n4. Initial storage path uses checked addition (`Instant::now().checked_add(...)`), so the malicious near-max value is retained.\n5. On the next heartbeat (typically within ~43–74s), expiry logic computes `backoff_time + slack` using unchecked addition, which overflows and panics.\n### Impact\nRemote unauthenticated denial of service (critical).  \nAny application exposing an affected `libp2p-gossipsub` listener can be crashed by a network-reachable peer that sends crafted `PRUNE` backoff values. The crash is triggered during heartbeat processing (not immediately at PRUNE parse time), and can be repeated by reconnecting and replaying the message.\n\n### Differences from CVE-2026-33040\nThis advisory is related to CVE-2026-33040 but it is not the same defect. CVE-2026-33040 addressed overflow during backoff insertion by adding checked arithmetic when converting PRUNE backoff into an Instant. The issue in this advisory occurs at a different location and at a different time: a near-maximum backoff can still be stored successfully, and the crash happens later in the heartbeat path when slack is added to that stored Instant using unchecked arithmetic.  This report covers a distinct secondary overflow path in heartbeat expiry handling that remained reachable after the original insertion-side hardening.\n\nThis vulnerability was originally reported by the Security team of the Ethereum Foundation.","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.49.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-xqmp-fxgv-xvq5/GHSA-xqmp-fxgv-xvq5.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-xqmp-fxgv-xvq5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34219"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gc42-3jg7-rxr2"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-190","CWE-617"],"github_reviewed":true,"github_reviewed_at":"2026-03-30T13:04:03Z","nvd_published_at":"2026-03-31T16:16:31Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
+{"schema_version":"1.9.0","id":"GHSA-xqmp-fxgv-xvq5","published":"2026-03-30T13:04:03Z","modified":"2026-11-13T12:55:56.691928632Z","aliases":["CVE-2026-34219","RUSTSEC-2026-0537"],"summary":"libp2p-gossipsub: Remote crash via unchecked Instant overflow in heartbeat backoff expiry handling","details":"## Description\n### Summary\nThe Rust libp2p Gossipsub implementation contains a remotely reachable panic in `backoff` expiry handling.  \nAfter a peer sends a crafted `PRUNE` control message with an attacker-controlled, near-maximum `backoff` value, the value is accepted and stored as an `Instant` near the representable upper bound. On a later heartbeat, the implementation performs unchecked `Instant + Duration` arithmetic (`backoff_time + slack`), which can overflow and panic with:\n`overflow when adding duration to instant`\nThis issue is reachable from any Gossipsub peer over normal `TCP + Noise + mplex/yamux` connectivity and requires no further authentication beyond becoming a protocol peer.\n### Attack Scenario\nAn attacker that can establish a libp2p Gossipsub session with a target node can crash the target by sending crafted `PRUNE` control data:\n1. Establish a standard libp2p session (`TCP + Noise`) and negotiate a stream multiplexer (`mplex`/`yamux`).\n2. Open a Gossipsub stream and send an RPC containing `ControlPrune` with a very large `backoff` (chosen near boundary conditions, e.g. `~ i64::MAX - victim_uptime_seconds`; example observed: `9223372036854674580` for ~28h uptime).\n3. The value is parsed from protobuf and passed through `Behaviour::handle_prune()` into mesh/backoff update logic.\n4. Initial storage path uses checked addition (`Instant::now().checked_add(...)`), so the malicious near-max value is retained.\n5. On the next heartbeat (typically within ~43–74s), expiry logic computes `backoff_time + slack` using unchecked addition, which overflows and panics.\n### Impact\nRemote unauthenticated denial of service (critical).  \nAny application exposing an affected `libp2p-gossipsub` listener can be crashed by a network-reachable peer that sends crafted `PRUNE` backoff values. The crash is triggered during heartbeat processing (not immediately at PRUNE parse time), and can be repeated by reconnecting and replaying the message.\n\n### Differences from CVE-2026-33040\nThis advisory is related to CVE-2026-33040 but it is not the same defect. CVE-2026-33040 addressed overflow during backoff insertion by adding checked arithmetic when converting PRUNE backoff into an Instant. The issue in this advisory occurs at a different location and at a different time: a near-maximum backoff can still be stored successfully, and the crash happens later in the heartbeat path when slack is added to that stored Instant using unchecked arithmetic.  This report covers a distinct secondary overflow path in heartbeat expiry handling that remained reachable after the original insertion-side hardening.\n\nThis vulnerability was originally reported by the Security team of the Ethereum Foundation.","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.49.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-xqmp-fxgv-xvq5/GHSA-xqmp-fxgv-xvq5.json"}}],"references":[{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-xqmp-fxgv-xvq5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34219"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gc42-3jg7-rxr2"},{"type":"PACKAGE","url":"https://github.com/libp2p/rust-libp2p"}],"database_specific":{"cwe_ids":["CWE-190","CWE-617"],"github_reviewed":true,"github_reviewed_at":"2026-03-30T13:04:03Z","nvd_published_at":"2026-03-31T16:16:31Z","severity":"HIGH"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0523.json b/data/crates.io/RUSTSEC-2026-0523.json
new file mode 100644
index 0000000000..07c37b35ec
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0523.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0523","published":"2026-09-30T12:00:00Z","modified":"2026-11-13T12:45:04.789912316Z","aliases":["GHSA-53rm-773f-4q8c"],"summary":"MAX_STREAM_DATA frame can open streams beyond the stream limit","details":"When a MAX_STREAM_DATA frame named a peer-initiated bidirectional stream that was not open yet, `received_max_stream_data` treated the stream, and every lower-numbered stream, as opened without checking the stream ID against the limit advertised to the peer. RFC 9000 section 4.6 requires closing the connection with `STREAM_LIMIT_ERROR` in this case, and the STREAM and RESET_STREAM handlers already did so.\n\nAfter the handshake, a peer can send one small MAX_STREAM_DATA frame naming a very large stream index, and `accept` then yields every stream up to that index. In `quinn`, a loop that keeps calling `accept_bi` can be handed more than 2^40 streams. Depending on the runtime, the endpoint runs out of memory, stops accepting new connections, or keeps busy indefinitely, even after the peer has gone away. Clients and servers that accept peer-initiated bidirectional streams are affected. Unidirectional streams are not.\n\nThe fix validates the stream ID in `received_max_stream_data` and adds a defensive check where streams are opened implicitly. It is in 0.11.19.","affected":[{"package":{"name":"quinn-proto","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.11.0"},{"fixed":"0.11.19"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0523.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/quinn-proto"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0523.html"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/3eb7465d9e11d7a245e99cde1a4eb872ec26d264"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/73114d8289d42bd536c790fa00a9beed05a4e5fa"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0524.json b/data/crates.io/RUSTSEC-2026-0524.json
new file mode 100644
index 0000000000..249ea42f9a
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0524.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0524","published":"2026-09-30T12:00:00Z","modified":"2026-11-13T12:45:06.127108520Z","aliases":["GHSA-wppq-2f6r-wfvm"],"summary":"Long Retry token can panic or exhaust memory in a QUIC client","details":"A client kept the token from a Retry packet without any length limit and put it into the header of every Initial packet it sent afterwards. Initial datagrams are 1200 bytes. When the token and connection IDs left no room for the minimum payload, `PacketBuilder::new` computed a minimum packet size larger than the maximum, which only a debug assertion checked. On the next `poll_transmit`, debug builds panic, and release builds try to allocate more than 10 GiB in one call. With longer tokens the allocation fails and the process aborts.\n\nA matching Retry packet can be built from the client's first Initial alone. The attacker can therefore be the server being contacted, or anyone who sees that Initial and can answer before the server does. Every application that makes outgoing connections with `quinn-proto` is affected, including all `quinn` clients. Servers do not process Retry packets.\n\nThe fix closes the connection with `PROTOCOL_VIOLATION` when an Initial token leaves too little room for frames. That covers Retry tokens and cached address-validation tokens, since both come from the peer. It also reserves room for CONNECTION_CLOSE after large Initial headers. Both changes are in 0.11.19.","affected":[{"package":{"name":"quinn-proto","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.11.0"},{"fixed":"0.11.19"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0524.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/quinn-proto"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0524.html"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/3bba467893ceff64d6cda0b3a2c51a1429e10372"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/d45b5136ed1d5b2b04ff6456443c0662acf1d0d3"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/74c33ff75281d7751488e410e21e4f030782b655"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/a6e78d1c8bf28630f1e92fbcc38f60e0a134b01a"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0525.json b/data/crates.io/RUSTSEC-2026-0525.json
new file mode 100644
index 0000000000..a0b3926599
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0525.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0525","published":"2026-07-10T12:00:00Z","modified":"2026-11-13T12:45:06.635369072Z","aliases":["CVE-2026-61544","GHSA-5hq8-qhww-jm7q"],"summary":"Remote panic when a peer certificate expires during the QUIC handshake","details":"After the QUIC handshake finished, the peer's libp2p TLS certificate was parsed a second time to get its peer ID, and the result was unwrapped with `expect`, on the assumption that it could not fail because the certificate had already been validated. Parsing checks the certificate's validity period again against the current time. A remote peer can present a certificate that is about to expire and delay the end of the handshake until it has expired, so the second parse fails and the process panics. No authentication is needed; any application with a reachable QUIC listener is affected.\n\nThe fix returns a connection error instead of panicking when the peer identity or certificate cannot be read after the handshake. It is in 0.13.1, and was backported to the main branch in libp2p/rust-libp2p#6525 for 0.14.0.","affected":[{"package":{"name":"libp2p-quic","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-quic"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.13.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0525.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-quic"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0525.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/pull/6525"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0526.json b/data/crates.io/RUSTSEC-2026-0526.json
new file mode 100644
index 0000000000..6e8774c08c
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0526.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0526","published":"2026-04-02T12:00:00Z","modified":"2026-11-13T12:45:06.633405487Z","aliases":["CVE-2026-35405","GHSA-cqfx-gf56-8x59"],"summary":"Rendezvous server accepted unlimited registrations per peer","details":"The rendezvous server's registration store did not limit how many namespaces a single peer could register, or how many registrations it held in total. Each registration stays until its TTL expires, up to 72 hours, and is not removed when the peer disconnects. An unauthenticated peer can send REGISTER requests for new namespaces in a loop, and many peers together can exhaust the server's memory, cutting off discovery for every client that relies on it.\n\nThe fix adds limits on registrations per peer (32 by default) and in total (10,000 by default), configurable through `Config`, and answers requests over the limit with an `Unavailable` error. It is in 0.17.1.","affected":[{"package":{"name":"libp2p-rendezvous","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-rendezvous"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.17.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0526.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-rendezvous"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0526.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/8fde2dc0fae8b433f97c6cdf9ee24f59d51a359c"}],"database_specific":{"license":"CC0-1.0"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0527.json b/data/crates.io/RUSTSEC-2026-0527.json
new file mode 100644
index 0000000000..3ce90d52eb
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0527.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0527","published":"2026-04-02T12:00:00Z","modified":"2026-11-13T12:45:06.396596735Z","aliases":["CVE-2026-35457","GHSA-v5hw-cv9c-rpg7"],"summary":"Rendezvous server stored an unlimited number of DISCOVER cookies","details":"Each DISCOVER request to a rendezvous server creates a pagination cookie, which the server kept in a map together with the registrations already returned for it. Entries were never evicted or capped, so an unauthenticated peer sending ordinary DISCOVER requests can make the server's memory grow without bound.\n\nThe fix keeps cookies in a fixed-size LRU cache (10,000 entries by default, configurable through `Config`). It is in 0.17.1.","affected":[{"package":{"name":"libp2p-rendezvous","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-rendezvous"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.17.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0527.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-rendezvous"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0527.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/8fde2dc0fae8b433f97c6cdf9ee24f59d51a359c"}],"database_specific":{"license":"CC0-1.0"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}]}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0528.json b/data/crates.io/RUSTSEC-2026-0528.json
new file mode 100644
index 0000000000..422178a5d5
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0528.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0528","published":"2026-11-12T12:00:00Z","modified":"2026-11-13T12:45:06.399026502Z","summary":"UB can be reached from safe code","details":"The variance of `RefSwap` and `OptionRefSwap` were incorrect, possibly allowing use-after-free.\n\n`OptionRefSwap::into_inner` did not check for null.\n\nThe fix is to make `RefSwap` and `OptionRefSwap` invariant, and to change `OptionRefSwap::into_inner` to return an option.\nIt is available in version 0.1.3.\nIf your project still compiles with 0.1.3 then it is not affected by the unsoundness on version 0.1.2","affected":[{"package":{"name":"ref-swap","ecosystem":"crates.io","purl":"pkg:cargo/ref-swap"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.1.3"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["memory-corruption"],"cvss":null,"informational":"unsound","source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0528.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/ref-swap"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0528.html"},{"type":"WEB","url":"https://github.com/Nitrokey/ref-swap/releases/tag/v0.1.3"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0529.json b/data/crates.io/RUSTSEC-2026-0529.json
new file mode 100644
index 0000000000..9a91533595
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0529.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0529","published":"2026-11-13T12:00:00Z","modified":"2026-11-13T12:45:06.795392066Z","aliases":["GHSA-mj2m-jxgv-r446"],"summary":"KVStoreInterpreter::verify_signature_legacy answers true for every token and every key","details":"`KVStoreInterpreter::verify_signature_legacy(&PushDrop, &PublicKey)`, public\nand deprecated since 0.2.0 (the crate's first release), read neither argument\nand answered `true`. A KVStore token signed by nobody, a signed token checked\nagainst a key other than its controller's, and a PushDrop with no fields each\npassed. Its documentation said it delegated to the `KVStoreFields`-based\nverifier; it did not.\n\nAn application that checks, with this function, a KVStore token it did not\nwrite (an overlay lookup's answer, or a transaction output a peer hands it) and\nacts on `true` accepts a value no controller signed, attributed to whatever\ncontroller the token names. No caller in the crate itself uses the function.\nThis was run on 0.2.0, 0.5.0, 0.8.0, 0.8.7, 0.8.8, 0.9.0-beta.1 and\n0.9.0-beta.7 as crates.io serves them, and the source of all 63 published\nversions carries the same constant body (the yanked 0.3.21 included).\n\n0.8.9 answers `true` only for a token whose controller field is the\ngiven key and whose last field is that key's signature over the others (the\n0.9 line's next prerelease carries the same fix). There is no workaround:\nupgrade to 0.8.9, or, on the 0.9 line, to its next prerelease.","affected":[{"package":{"name":"bsv-rs","ecosystem":"crates.io","purl":"pkg:cargo/bsv-rs"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.8.9"},{"introduced":"0.9.0-beta.1"},{"fixed":"0.9.0-beta.7.0"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":["bsv_rs::kvstore::KVStoreInterpreter::verify_signature_legacy"],"os":[]}},"database_specific":{"categories":["crypto-failure"],"cvss":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0529.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/bsv-rs"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0529.html"},{"type":"WEB","url":"https://github.com/Calhooon/bsv-rs/blob/v0.8.9/CHANGELOG.md"}],"database_specific":{"license":"CC0-1.0"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0530.json b/data/crates.io/RUSTSEC-2026-0530.json
new file mode 100644
index 0000000000..5410813cde
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0530.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0530","published":"2026-09-03T12:00:00Z","modified":"2026-11-13T12:55:36.653610929Z","aliases":["CVE-2026-123596","GHSA-3r6v-f3jh-vvqm","RUSTSEC-2026-0539"],"summary":"Parent-side NSEC at a zone cut accepted as proof of nonexistence (hickory-proto)","details":"Up to 0.26.0-alpha.1, hickory-proto's DNSSEC validation accepted the NSEC record that a parent zone signs at a delegation as proof that names below the zone cut, or other types at the cut, do not exist. Such a record only proves that no DS record exists there (RFC 6840 section 4.1). Someone who can answer or modify DNS responses could replay the parent's genuine signed records to get a denial for an existing name in the child zone accepted as secure.\n\nFrom 0.26.0-beta.1 the DNSSEC validation code lives in the hickory-net crate, where this was fixed in hickory-net 0.26.2. No hickory-proto release contains a fix. Users of DNSSEC validation in older hickory-proto releases (directly or through hickory-resolver or hickory-recursor) should move to the 0.26.2 or later releases, which validate through hickory-net.","affected":[{"package":{"name":"hickory-proto","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.26.0-beta.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["privilege-escalation"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0530.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/hickory-proto"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0530.html"},{"type":"WEB","url":"https://github.com/hickory-dns/hickory-dns/commit/2e3c829ea45000b1c409a64a03bd422618372471"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0531.json b/data/crates.io/RUSTSEC-2026-0531.json
new file mode 100644
index 0000000000..8df1212d6f
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0531.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0531","published":"2026-09-03T12:00:00Z","modified":"2026-11-13T12:55:54.316294846Z","aliases":["CVE-2026-123591","GHSA-7php-9j59-g3ch","RUSTSEC-2026-0540"],"summary":"Child-side NSEC or NSEC3 record accepted as proof that a delegation has no DS record (hickory-proto)","details":"Up to 0.26.0-alpha.1, hickory-proto's DNSSEC validation accepted an NSEC or NSEC3 record from the child side of a zone cut, which has the SOA bit set, as proof that the parent has no DS record for the delegation (RFC 4035 section 5.2, RFC 6840 section 4.4). Someone who can answer or modify DNS responses could make a secure delegation look insecure and then forge records in the child zone.\n\nFrom 0.26.0-beta.1 the DNSSEC validation code lives in the hickory-net crate, where this was fixed in hickory-net 0.26.2. No hickory-proto release contains a fix. Users of DNSSEC validation in older hickory-proto releases (directly or through hickory-resolver or hickory-recursor) should move to the 0.26.2 or later releases, which validate through hickory-net.","affected":[{"package":{"name":"hickory-proto","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.26.0-beta.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["privilege-escalation"],"cvss":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0531.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/hickory-proto"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0531.html"},{"type":"WEB","url":"https://github.com/hickory-dns/hickory-dns/commit/ec98851f4d175d97b61701bc539523ff63ddbb00"}],"database_specific":{"license":"CC0-1.0"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0532.json b/data/crates.io/RUSTSEC-2026-0532.json
new file mode 100644
index 0000000000..4d1631f72c
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0532.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0532","published":"2026-09-03T12:00:00Z","modified":"2026-11-13T12:55:46.260287377Z","aliases":["CVE-2026-123595","GHSA-624w-vvww-xvpw","RUSTSEC-2026-0541"],"summary":"Parent-side NSEC3 at a zone cut accepted as proof of nonexistence (hickory-proto 0.25)","details":"In hickory-proto 0.25.0 through 0.26.0-alpha.1, NSEC3 validation picked the closest encloser by hashed owner name alone and accepted the NSEC3 record that a parent zone signs at a delegation as proof that names at or below the zone cut do not exist. Such a record only proves that no DS record exists there (RFC 6840 section 4.1, RFC 5155 section 8.3). Someone who can answer or modify DNS responses could replay the parent's genuine signed records to get a denial for an existing name in the child zone accepted as secure.\n\nFrom 0.26.0-beta.1 the DNSSEC validation code lives in the hickory-net crate, where this was fixed in hickory-net 0.26.2. No hickory-proto release contains a fix. Users of DNSSEC validation in hickory-proto 0.25 (directly or through hickory-resolver or hickory-recursor 0.25) should move to the 0.26.2 or later releases, which validate through hickory-net.","affected":[{"package":{"name":"hickory-proto","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.25.0"},{"fixed":"0.26.0-beta.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["privilege-escalation"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0532.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/hickory-proto"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0532.html"},{"type":"WEB","url":"https://github.com/hickory-dns/hickory-dns/commit/889801333d7f18d59a4468100e8cd1859e083d43"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0533.json b/data/crates.io/RUSTSEC-2026-0533.json
new file mode 100644
index 0000000000..404ec6254c
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0533.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0533","published":"2026-11-12T12:00:00Z","modified":"2026-11-13T12:45:09.009911487Z","aliases":["GHSA-934p-vp7m-gx3c"],"summary":"Incorrect handling of embedded SVG and MathML leads to mutation XSS","details":"The MathML text integration points (`mi`, `mo`, `mn`, `ms`, `mtext`) and SVG `foreignObject` can be made to contain a tag in the other one's namespace (a MathML integration point with a child in the SVG namespace, or vice versa) without the root tag that switches out of the HTML namespace. If the attacker can construct input that parses differently in as HTML than as foreign XML, they can inject arbitrary JavaScript code into the user's browser.\n\nFor example:\n\n- The user writes `<math><mi><svg><gadget></svg></mi></math>`.\n- The application enables `math`, `mi`, and the gadget, but not `svg`.\n- Ammonia filters the input to `<math><mi><gadget></mi></math>`.\n- Because svg is now gone, the gadget switches from being parsed as SVG to being parsed as HTML.\n- The gadget is written in such a way that it exploits the parsing differences between HTML and MathML.\n\nAs far as we know, the gadget can only be written using a tag that is parsed as raw text in HTML. These [elements] are:\n\n- title\n- textarea\n- xmp\n- iframe\n- noembed\n- noframes\n- plaintext\n- noscript\n- style\n- script\n\nApplications that do not explicitly allow any of these tags should not be affected, since none are allowed by default.\n\n[elements]: https://github.com/servo/html5ever/blob/a027c2835472d518893c906dc29c42200af3c960/html5ever/src/tree_builder/rules.rs\n\n---\n\nThis vulnerability was reported by Roger Meyer.","affected":[{"package":{"name":"ammonia","ecosystem":"crates.io","purl":"pkg:cargo/ammonia"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"3.3.5"},{"introduced":"4.0.0"},{"fixed":"4.1.9"},{"introduced":"4.2.0"},{"fixed":"4.2.5"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["format-injection"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0533.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/ammonia"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0533.html"},{"type":"WEB","url":"https://github.com/rust-ammonia/ammonia/pull/269"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0534.json b/data/crates.io/RUSTSEC-2026-0534.json
new file mode 100644
index 0000000000..b80f4561df
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0534.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0534","published":"2026-10-19T12:00:00Z","modified":"2026-11-13T12:45:07.339789114Z","aliases":["GHSA-vrx6-jcp8-vm7m"],"summary":"Unbounded backoff state from PRUNE messages for unknown topics","details":"A PRUNE control message names topics and asks for a backoff on each. The handler recorded a backoff for every named topic, including topics the local node had never joined. A peer can send PRUNEs naming many new short topic IDs with a long backoff. Each pair is kept until the backoff expires, up to an hour, even after the peer disconnects, so a stream of PRUNEs, possibly from many peer IDs, can use up the node's memory. Peer scoring does not penalise these messages.\n\nThe fix ignores PRUNE entries for topics that are not in the node's mesh. It is in 0.50.1, and was backported to the main branch in libp2p/rust-libp2p#6707.","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.50.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0534.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-gossipsub"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0534.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/9c647828abea0dfc0b4e827dff1e176ec8b44752"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/pull/6707"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0535.json b/data/crates.io/RUSTSEC-2026-0535.json
new file mode 100644
index 0000000000..a5abe058fa
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0535.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0535","published":"2026-03-18T12:00:00Z","modified":"2026-11-13T12:45:08.544187115Z","aliases":["CVE-2026-33040","GHSA-gc42-3jg7-rxr2"],"summary":"Remote panic from an oversized PRUNE backoff","details":"When a peer sent a PRUNE control message, the backoff it asked for was turned into an expiry time with `Instant::now() + Duration::from_secs(backoff)`. That addition panics on overflow, so a peer that sends a PRUNE with a very large backoff, such as `u64::MAX`, crashes the node. No authentication is needed beyond an ordinary libp2p connection with the gossipsub protocol, and the attacker can repeat it after every restart.\n\nThe fix uses `Instant::checked_add` in `BackoffStorage::update_backoff` and ignores a backoff that would overflow. It is in 0.49.3.","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.49.3"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0535.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-gossipsub"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0535.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/84153a559bdbcb92a48413dd2a31035800cb882d"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0536.json b/data/crates.io/RUSTSEC-2026-0536.json
new file mode 100644
index 0000000000..bcccb6f421
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0536.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0536","published":"2026-09-05T12:00:00Z","modified":"2026-11-13T12:45:02.747808849Z","aliases":["CVE-2026-95859","GHSA-g3g5-x568-qvqx"],"summary":"Unbounded memory growth from GRAFT messages for unsubscribed topics","details":"When a GRAFT control message arrived, every topic it named was added to that peer's set of topics, on the assumption that a peer grafting us must be subscribed. Nothing checked that the peer had subscribed, and subscription filters only apply to SUBSCRIBE messages. A peer can keep sending GRAFTs with new short topic IDs over one connection, and the set grows until the peer unsubscribes or disconnects. Memory grows without bound and the node can be killed for running out of memory.\n\nThe fix no longer records topics from GRAFT messages and drops a GRAFT for a topic the peer has not subscribed to. It also makes `MaxCountSubscriptionFilter` the default subscription filter. It is in 0.49.5, and was backported to the 0.50 line before 0.50.0.","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.49.5"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0536.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-gossipsub"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0536.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/51ed5f00e1b0620ded3444ecadf18477052148ea"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/pull/6608"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0537.json b/data/crates.io/RUSTSEC-2026-0537.json
new file mode 100644
index 0000000000..608254f851
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0537.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0537","published":"2026-03-27T12:00:00Z","modified":"2026-11-13T12:45:07.345999345Z","aliases":["CVE-2026-34219","GHSA-xqmp-fxgv-xvq5"],"summary":"Remote panic in the heartbeat from a large PRUNE backoff","details":"The 0.49.3 fix stopped an overflow when a PRUNE backoff is first stored, but a backoff just small enough to be stored could still overflow later. On each heartbeat, expired backoffs were found with `backoff_time + slack > now`, which panics when the stored time is close to the largest `Instant`. A peer that sends one PRUNE with such a backoff crashes the node a heartbeat or so later, and can repeat it after every restart.\n\nThe fix caps a remote PRUNE backoff at one hour, uses `checked_add` for the heartbeat comparison, and replaces other unchecked time arithmetic in the behaviour, peer scoring and time cache with checked or saturating operations. It is in 0.49.4.","affected":[{"package":{"name":"libp2p-gossipsub","ecosystem":"crates.io","purl":"pkg:cargo/libp2p-gossipsub"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.49.4"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0537.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/libp2p-gossipsub"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0537.html"},{"type":"WEB","url":"https://github.com/libp2p/rust-libp2p/commit/55e4a64630f66d55fec5955c8f9905413c5d0859"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0538.json b/data/crates.io/RUSTSEC-2026-0538.json
new file mode 100644
index 0000000000..a9d80b1c5d
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0538.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0538","published":"2026-09-30T12:00:00Z","modified":"2026-11-13T12:45:08.844283231Z","aliases":["GHSA-6pp4-4cxf-xf88"],"summary":"Receive loop can spin after a truncated datagram","details":"Some targets read one datagram per `recvmsg` call instead of using `recvmmsg`: Apple platforms without the `fast-apple-datapath` feature, OpenBSD, NetBSD, Solaris and illumos, and from 0.6 also DragonFly BSD, Redox and GNU/Hurd. On these targets the receive loop set up its `msghdr` only once and looked at the `MSG_TRUNC` flag before checking whether `recvmsg` had failed. After a datagram larger than the receive buffer was dropped, a following `EAGAIN` still saw the old truncation flag. The loop then kept issuing non-blocking receives instead of returning `WouldBlock`.\n\nWhen the receive buffer is smaller than a datagram that arrives, a remote sender can keep the task that drives the socket busy, before any QUIC packet authentication. The loop ends only when a later datagram fits in the buffer. Whether an application is exposed therefore depends on the receive buffer size it uses. Linux, Android, FreeBSD and Windows use other receive paths and are not affected.\n\nThe fix rebuilds the header before every `recvmsg` call and returns receive errors before checking the truncation flag. It is in 0.5.16 and 0.6.3.","affected":[{"package":{"name":"quinn-udp","ecosystem":"crates.io","purl":"pkg:cargo/quinn-udp"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.5.16"},{"introduced":"0.6.0"},{"fixed":"0.6.3"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["denial-of-service"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0538.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/quinn-udp"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0538.html"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/462865a6c33039c26076f7077c7cd7e2f997b9cd"},{"type":"WEB","url":"https://github.com/quinn-rs/quinn/commit/6862d3dcc9a9333fc4160481b3e5e5d154d4dd36"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0539.json b/data/crates.io/RUSTSEC-2026-0539.json
new file mode 100644
index 0000000000..b207632913
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0539.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0539","published":"2026-09-03T12:00:00Z","modified":"2026-11-13T12:55:36.653610929Z","aliases":["CVE-2026-123596","GHSA-3r6v-f3jh-vvqm","RUSTSEC-2026-0530"],"summary":"Parent-side NSEC at a zone cut accepted as proof of nonexistence below the cut","details":"At a delegation, the parent zone signs an NSEC record for the child's name whose type bitmap has NS but not SOA (or has DNAME). RFC 6840 section 4.1 says such a record only proves that no DS record exists at that name. It says nothing about names below the cut or about other types at the cut, because those belong to the child zone.\n\nDNSSEC validation did not make this distinction. It used such a record as a covering NSEC for names below the cut, and as a direct match proving that other types did not exist at the cut. An attacker who can answer or modify DNS responses can replay the parent's genuine signed records to get an NXDOMAIN or NODATA response for an existing name in the child zone accepted as secure. A recursor caches that denial for the negative TTL.\n\nThis affects DNSSEC validation through `DnssecDnsHandle` when built with `dnssec-ring` or `dnssec-aws-lc-rs`.\n\nThe fix adds `NSEC::is_ancestor_delegation()` in hickory-proto. Validation no longer uses such a record to cover a name below its owner, and treats a direct match on it as bogus unless the query is for DS. It is in 0.26.2.","affected":[{"package":{"name":"hickory-net","ecosystem":"crates.io","purl":"pkg:cargo/hickory-net"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.26.2"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["privilege-escalation"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0539.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/hickory-net"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0539.html"},{"type":"WEB","url":"https://github.com/hickory-dns/hickory-dns/commit/2e3c829ea45000b1c409a64a03bd422618372471"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0540.json b/data/crates.io/RUSTSEC-2026-0540.json
new file mode 100644
index 0000000000..4ef9bddb25
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0540.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0540","published":"2026-09-03T12:00:00Z","modified":"2026-11-13T12:55:54.316294846Z","aliases":["CVE-2026-123591","GHSA-7php-9j59-g3ch","RUSTSEC-2026-0531"],"summary":"Child-side NSEC or NSEC3 record accepted as proof that a delegation has no DS record","details":"To show that a delegation is insecure, a validator needs proof that the parent zone has no DS record for it. That proof must come from the parent side of the zone cut: RFC 4035 section 5.2, RFC 5155 section 8.9 and RFC 6840 section 4.4 require the matching NSEC or NSEC3 record not to have the SOA bit set, since a record with SOA comes from the child zone's apex.\n\nDNSSEC validation did not check this. An attacker who can answer or modify DNS responses can answer a DS query with the child zone's own signed NSEC or NSEC3 record for its apex, which does not list DS, and have the validator accept that the delegation is insecure. Records in the child zone can then be forged without any signature.\n\nThis affects DNSSEC validation through `DnssecDnsHandle` when built with `dnssec-ring` or `dnssec-aws-lc-rs`.\n\nThe fix treats a NODATA proof for a DS query as bogus when the directly matching NSEC or NSEC3 record has SOA in its type bitmap. It is in 0.26.2.","affected":[{"package":{"name":"hickory-net","ecosystem":"crates.io","purl":"pkg:cargo/hickory-net"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.26.2"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["privilege-escalation"],"cvss":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0540.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/hickory-net"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0540.html"},{"type":"WEB","url":"https://github.com/hickory-dns/hickory-dns/commit/ec98851f4d175d97b61701bc539523ff63ddbb00"}],"database_specific":{"license":"CC0-1.0"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}
\ No newline at end of file
diff --git a/data/crates.io/RUSTSEC-2026-0541.json b/data/crates.io/RUSTSEC-2026-0541.json
new file mode 100644
index 0000000000..fa6fdf3fff
--- /dev/null
+++ b/data/crates.io/RUSTSEC-2026-0541.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"RUSTSEC-2026-0541","published":"2026-09-03T12:00:00Z","modified":"2026-11-13T12:55:46.260287377Z","aliases":["CVE-2026-123595","GHSA-624w-vvww-xvpw","RUSTSEC-2026-0532"],"summary":"Parent-side NSEC3 at a zone cut accepted as proof of nonexistence at and below the cut","details":"At a delegation, the parent zone signs an NSEC3 record for the child's name whose type bitmap has NS but not SOA (or has DNAME). RFC 6840 section 4.1 and RFC 5155 section 8.3 say such a record only proves that no DS record exists at that name.\n\nNSEC3 validation picked the closest encloser by matching the hashed owner name alone, without looking at the type bitmap, so it accepted such a record as the closest encloser for names below the cut. For NODATA responses, it accepted a direct match on such a record as proof that any type other than the queried one and CNAME was absent, not only DS. An attacker who can answer or modify DNS responses can replay the parent's genuine signed records to get an NXDOMAIN for a name below the cut, or a NODATA for a non-DS type at the cut, accepted as secure. A recursor caches that denial for the negative TTL.\n\nThis affects DNSSEC validation through `DnssecDnsHandle` when built with `dnssec-ring` or `dnssec-aws-lc-rs`.\n\nThe fix adds `NSEC3::is_ancestor_delegation()` in hickory-proto. Validation no longer accepts such a record as a closest encloser, and treats a direct match on it as bogus unless the query is for DS. It is in 0.26.2.","affected":[{"package":{"name":"hickory-net","ecosystem":"crates.io","purl":"pkg:cargo/hickory-net"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.26.2"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":["privilege-escalation"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0541.json"}}],"references":[{"type":"PACKAGE","url":"https://crates.io/crates/hickory-net"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2026-0541.html"},{"type":"WEB","url":"https://github.com/hickory-dns/hickory-dns/commit/889801333d7f18d59a4468100e8cd1859e083d43"}],"database_specific":{"license":"CC0-1.0"}}
\ No newline at end of file
diff --git a/data/npm/GHSA-mjrq-cffv-q4qc.json b/data/npm/GHSA-mjrq-cffv-q4qc.json
new file mode 100644
index 0000000000..f1db6ae0be
--- /dev/null
+++ b/data/npm/GHSA-mjrq-cffv-q4qc.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"GHSA-mjrq-cffv-q4qc","published":"2026-11-13T18:11:49Z","modified":"2026-11-13T18:30:03.869521603Z","aliases":["CVE-2026-128070"],"summary":"Nuxt dev server serves files from a parent directory with a stray lockfile or workspace file","details":"### Summary\n\nNuxt can pick a parent directory that does not declare a workspace as its default `workspaceDir`: the farthest directory with a lockfile when the project is not inside a git repository, or the farthest directory with a `pnpm-workspace.yaml` or `deno.json` file, even one that only holds settings. The Vite dev server allows `/_nuxt/@fs/` requests for any file under `workspaceDir`. A stray lockfile or settings file in a parent directory, such as the home directory, therefore lets anyone who can reach the dev server read files in that directory and everything below it.\n\n### Impact\n\nThis affects the development server only; production builds are not affected. All of the following have to hold:\n\n- A parent directory contains either:\n  - a lockfile (`package-lock.json`, `pnpm-lock.yaml`, `yarn.lock`, `bun.lock` and similar), while the project is not inside a git repository and has no workspace file (`pnpm-workspace.yaml`, `turbo.json`, `lerna.json` and similar) above it. Running `npm install` once in the home directory is enough to create one there.\n  - a `pnpm-workspace.yaml` without a `packages` list (for example one that only holds pnpm settings such as `onlyBuiltDependencies`), or a `deno.json` or `deno.jsonc` without a `workspace` field. This applies even if the project is inside a git repository.\n- The dev server is reachable from the network (`nuxt dev --host`, `nuxt dev --tunnel`, a published container port, or a proxy onto the dev port). The default localhost bind limits this to local processes, which can usually read the same files directly.\n\nFor example, with `~/package-lock.json` and a project at `~/projects/app` that has no `.git` directory, `nuxt dev --host` serves `GET /_nuxt/@fs/<home>/.ssh/id_ed25519` with status 200. Any file in the home directory that is not covered by Vite's `server.fs.deny` list can be read this way, including SSH keys, cloud credentials and the Nuxt DevTools auth token in `~/.nuxt/devtools/dev-auth-token.txt`.\n\nNo browser is involved: a plain HTTP client is enough. A web page on another origin cannot read the response, and DNS rebinding is rejected by Vite's host check.\n\nProjects whose parent directories contain none of these files are not affected, nor are projects inside a git repository whose only lockfile is their own. Nuxt 3.5.0 and later are affected.\n\n### Patches\n\nFixed in `@nuxt/schema` 4.6.4, which `nuxt` 4.6.4 depends on. A parent directory now only becomes the default `workspaceDir` if it declares a workspace: a `pnpm-workspace.yaml` with `packages`, a `deno.json` or `deno.jsonc` with `workspace`, a `lerna.json`, `turbo.json` or `rush.json`, a `package.json` with `workspaces`, or a git repository. A lockfile or a settings file alone no longer widens the dev server's `server.fs.allow` list. If your monorepo root is not detected this way, set `workspaceDir` in `nuxt.config.ts`. Nuxt 3 has reached end of life and will not receive a fix.\n\n### Workarounds\n\nSet `workspaceDir` explicitly in `nuxt.config.ts` to the project root (or to the real monorepo root), or remove the stray lockfile or settings file from the parent directory. Do not expose the dev server to untrusted networks. If the dev port was reachable from an untrusted network while this layout was in place, treat files in the parent directory as exposed and rotate credentials such as SSH keys and cloud tokens.\n\n### Credits\n\nNuxt thanks [@superboy-zjc](https://github.com/superboy-zjc) for the report.","affected":[{"package":{"name":"@nuxt/schema","ecosystem":"npm","purl":"pkg:npm/%40nuxt/schema"},"ranges":[{"type":"SEMVER","events":[{"introduced":"3.5.0"},{"fixed":"4.6.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-mjrq-cffv-q4qc/GHSA-mjrq-cffv-q4qc.json"}}],"references":[{"type":"WEB","url":"https://github.com/nuxt/nuxt/security/advisories/GHSA-mjrq-cffv-q4qc"},{"type":"WEB","url":"https://github.com/nuxt/nuxt/commit/89d3306d1976dd52ac2e73078806a3e889cbb8bd"},{"type":"PACKAGE","url":"https://github.com/nuxt/nuxt"},{"type":"WEB","url":"https://github.com/nuxt/nuxt/releases/tag/v4.6.4"}],"database_specific":{"cwe_ids":["CWE-552"],"github_reviewed":true,"github_reviewed_at":"2026-11-13T18:11:49Z","nvd_published_at":null,"severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-18193.json b/data/npm/MAL-2026-18193.json
index 281959a2b5..ecf1ad4cb1 100644
--- a/data/npm/MAL-2026-18193.json
+++ b/data/npm/MAL-2026-18193.json
@@ -1 +1 @@
-{"schema_version":"1.9.2","id":"MAL-2026-18193","published":"2026-10-22T18:35:11Z","modified":"2026-11-13T12:30:04.554576074Z","aliases":["GHSA-9855-prwc-mfp2"],"summary":"Malicious code in opencode-skills-collection (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941)\nPackage bundles a collection of skill directories containing various helper scripts. Static pattern matches fired on routine network primitives: a Python scraper (bundled-skills/junta-leiloeiros/scripts/base_scraper.py) and an API server script (serve_api.py) that reference `ping`/GET/POST, a benchmark harness (bundled-skills/loki-mode/benchmarks/run-benchmarks.sh), an rclone install helper (bundled-skills/rclone-cli/scripts/install.sh) that runs `curl https://rclone.org` to fetch the rclone installer from its official project domain, and a youtube-notetaker verification script using `curl` against GET endpoints. Matches reflect keyword co-occurrence (curl/ping/GET/POST) in utility scripts rather than exfiltration shapes: no hardcoded attacker C2, no reads of installer-side secret paths (~/.aws, ~/.ssh, ~/.npmrc), no environment scraping, no obfuscated destinations, and no install-time lifecycle hook that auto-executes these scripts. The rclone install.sh fetches from rclone's official domain, which is aggressive-but-legitimate runtime tool installation rather than a dropper. The scripts fire only when a user explicitly invokes the corresponding skill, not on `npm install`.\n\n## Source: ghsa-malware (c84dd18445ee7b0f29f3f76c81efb76a43fa7ef77d4c99b57245f4ef8e72a13a)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"opencode-skills-collection","ecosystem":"npm","purl":"pkg:npm/opencode-skills-collection"},"versions":["4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18","4.1.20","4.1.2","4.1.5","4.1.31","4.1.32","4.1.30","4.1.33","4.1.22","4.1.29","4.1.35","4.1.36","4.1.39","4.1.37","4.1.38","4.1.40","4.1.34","4.1.42"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"bundled-skills/junta-leiloeiros/scripts/scraper/base_scraper.py","sha256":"73408b41050dbf71476aa691bb608425a4a64532cc6864b29817e6e1afc63ff2","tlsh":"48f18432893668a2f5c3c8ad056df1a76812bd432d4c22317eec92140fdd43996f5dfa"},{"path":"bundled-skills/junta-leiloeiros/scripts/serve_api.py","sha256":"0a73f6e38c4853d7f4498b7537ccbc76e9cdadb1ff41253c2948b4da20981ac6","tlsh":"65b14f018c1d0461cb9386581f62e42272336e4b1e0876257bdf43b87fad17bacb669d"},{"path":"bundled-skills/loki-mode/benchmarks/run-benchmarks.sh","sha256":"16f15d42dfdfe5109b7590d611b973f837809f0c6adf82a94d8676e8e4771959","tlsh":"3153e991e8a5293344078734f68f62626631b6431b50642c7f8d42186f19f3aa7ef7bf"},{"path":"bundled-skills/rclone-cli/scripts/install.sh","sha256":"8485ae22413481077cafb7bf1d57f35f009f400a28deee666344981e98c4c9b4","tlsh":"f4a1324ae01463f26a924d6e7b53705da380826b3d90b57cb3af4b1c6f0532a61f279d"},{"path":"bundled-skills/youtube-notetaker/scripts/verify.sh","sha256":"1dbacc8b6ac6da39818847ebed953d999260eaaeb15a2e318764385c8532ed9e","tlsh":"9f210f24f400d17a776d28b47cc939de3e1b126f49ea2d14b687727910984fab83cb41"}],"package_integrity":[{"filename":"opencode-skills-collection-4.1.7.tgz","hashes":{"sha1":"9b34e5860b2149732cff37c3d5729a7bea59a666","sha512_sri":"sha512-0AvNrb2sZlGA9OuUUCtmAO1yZ0J4GMYohy7yKw4yD3YDllI18DQXG02n0cjluA4DxHoZUC0fBJwN+A4FXG1W5Q=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/opencode-skills-collection/MAL-2026-18193.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9855-prwc-mfp2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.11"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.13"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.12"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.17"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.7"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.0.77"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.8"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.18"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.10"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.16"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.9"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.0.57"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.0.56"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.19"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.14"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.20"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.5"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-10-22T19:22:11.783076653Z","modified_time":"2026-10-22T19:20:02Z","sha256":"c84dd18445ee7b0f29f3f76c81efb76a43fa7ef77d4c99b57245f4ef8e72a13a","source":"ghsa-malware","versions":["4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-10-22T20:25:48.905581489Z","modified_time":"2026-10-22T19:57:00Z","sha256":"7f9554768223a627ad7704e8825b53cf38951547f35dd2e747b067560562979f","source":"ghsa-malware","versions":["4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"IN-MAL-2026-022114","import_time":"2026-10-29T14:14:27.090315553Z","modified_time":"2026-10-29T13:50:41Z","sha256":"0ef3ce32c66764fd843324fcbf0467d95e38ded4c3778358f9a9983e1d88eb81","source":"amazon-inspector","versions":["4.1.1"]},{"id":"IN-MAL-2026-022185","import_time":"2026-10-29T14:14:32.740914307Z","modified_time":"2026-10-29T13:59:57Z","sha256":"0f6060bf9b062de87030e116099177fe1139d8fe492d3b7916ebf2bb0f4dc939","source":"amazon-inspector","versions":["4.1.6"]},{"id":"IN-MAL-2026-022246","import_time":"2026-10-29T14:14:37.296149633Z","modified_time":"2026-10-29T14:07:59Z","sha256":"959d4111548af2c6606e3348b009a9d438424db418dd2bc2f101aac2b0435793","source":"amazon-inspector","versions":["4.1.11"]},{"id":"IN-MAL-2026-022179","import_time":"2026-10-29T14:14:32.294072164Z","modified_time":"2026-10-29T13:59:12Z","sha256":"a0cc548c85008df9fb80c0c1883b39b2f7c019249d718085741380252fcc0a3f","source":"amazon-inspector","versions":["4.1.13"]},{"id":"IN-MAL-2026-022090","import_time":"2026-10-29T14:14:24.909245384Z","modified_time":"2026-10-29T13:47:28Z","sha256":"ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941","source":"amazon-inspector","versions":["4.1.12"]},{"id":"IN-MAL-2026-022121","import_time":"2026-10-29T14:14:27.67633539Z","modified_time":"2026-10-29T13:51:31Z","sha256":"154334b82c927a191e91994f527d770cb3f984c95740d832dd760aaff4251795","source":"amazon-inspector","versions":["4.1.0"]},{"id":"IN-MAL-2026-022180","import_time":"2026-10-29T14:14:32.374687096Z","modified_time":"2026-10-29T13:59:18Z","sha256":"2805226ddecf93034c614e75b1fde8f3479ba9d176b2be077c27265b8afaaf42","source":"amazon-inspector","versions":["4.1.17"]},{"id":"IN-MAL-2026-022184","import_time":"2026-10-29T14:14:32.667301006Z","modified_time":"2026-10-29T13:59:51Z","sha256":"4b370ecef32f75c304234d95aad45075178c1bb0f49b6390b3cdcf3c34b11ee0","source":"amazon-inspector","versions":["4.1.7"]},{"id":"IN-MAL-2026-022187","import_time":"2026-10-29T14:14:32.897184198Z","modified_time":"2026-10-29T14:00:19Z","sha256":"51a4eccc4d08f6fd3317d32a94cc65ae89145009b24ba50d8f0b810e8c90684b","source":"amazon-inspector","versions":["4.1.3"]},{"id":"IN-MAL-2026-022115","import_time":"2026-10-29T14:14:27.155365698Z","modified_time":"2026-10-29T13:50:48Z","sha256":"ea84433517366e479ab384361feea9117886b596b1dded9a54e0367339cc48d1","source":"amazon-inspector","versions":["4.0.77"]},{"id":"IN-MAL-2026-022186","import_time":"2026-10-29T14:14:32.811467778Z","modified_time":"2026-10-29T14:00:11Z","sha256":"f04ac946536f534c434638c42208b1b28e6b53c6d02b8dcdd263bc62d87a54ef","source":"amazon-inspector","versions":["4.1.4"]},{"id":"IN-MAL-2026-022183","import_time":"2026-10-29T14:14:32.596767174Z","modified_time":"2026-10-29T13:59:42Z","sha256":"0029ec54bda52537cccd9a907342f8a9fd1958e28fa1669f2f980ceb86a0930e","source":"amazon-inspector","versions":["4.1.8"]},{"id":"IN-MAL-2026-022178","import_time":"2026-10-29T14:14:32.231805466Z","modified_time":"2026-10-29T13:59:04Z","sha256":"0da45f9abc383cb78a9938c7a162879afdf4a04a257aa3f255608af37972844f","source":"amazon-inspector","versions":["4.1.18"]},{"id":"IN-MAL-2026-022113","import_time":"2026-10-29T14:14:26.979232509Z","modified_time":"2026-10-29T13:50:32Z","sha256":"5b3fc933b0130a8a2a8c3f52762f75ccdfea61ecb6049ce6beac9c332837d91b","source":"amazon-inspector","versions":["4.1.10"]},{"id":"IN-MAL-2026-022112","import_time":"2026-10-29T14:14:26.888589531Z","modified_time":"2026-10-29T13:50:25Z","sha256":"6fc59e1e0fe7b6cf0424a43decc7ea140fb353a4ab146691df9be5ad46be21ff","source":"amazon-inspector","versions":["4.1.16"]},{"id":"IN-MAL-2026-022182","import_time":"2026-10-29T14:14:32.512479943Z","modified_time":"2026-10-29T13:59:35Z","sha256":"cf2b098c0145a47baf06fe081c4f9e28ce91cf2920950d23590f6c4f117842c2","source":"amazon-inspector","versions":["4.1.9"]},{"id":"IN-MAL-2026-022116","import_time":"2026-10-29T14:14:27.240733053Z","modified_time":"2026-10-29T13:50:56Z","sha256":"d974034cdfef3f7bc43cd4faf7a153a8c5527bd56d5401dcfeee18b4438a48bd","source":"amazon-inspector","versions":["4.0.57"]},{"id":"IN-MAL-2026-022124","import_time":"2026-10-29T14:14:27.931542705Z","modified_time":"2026-10-29T13:52:01Z","sha256":"3ae0d7d01d6afaae966b6cbf761530c44d7155594bb13c7ae890eadb9f8fe4dd","source":"amazon-inspector","versions":["4.0.56"]},{"id":"IN-MAL-2026-022233","import_time":"2026-10-29T14:14:36.386191287Z","modified_time":"2026-10-29T14:06:09Z","sha256":"87fb5656dcf338932828d48081fd35939d8021b0427b1ccf8939b32dc2012be0","source":"amazon-inspector","versions":["4.1.19"]},{"id":"IN-MAL-2026-022181","import_time":"2026-10-29T14:14:32.439768676Z","modified_time":"2026-10-29T13:59:28Z","sha256":"b0135fc94540220bc4dfe2f66120b3a5998ca3b900fac412f72db49de411381d","source":"amazon-inspector","versions":["4.1.14"]},{"id":"IN-MAL-2026-022109","import_time":"2026-10-29T14:14:26.614042584Z","modified_time":"2026-10-29T13:49:56Z","sha256":"0a8991af13903dc263c114d5a81eff7b88269b668ee5ebac44b7bbb99ebba235","source":"amazon-inspector","versions":["4.1.20"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-10-29T18:23:53.761685354Z","modified_time":"2026-10-29T17:28:43Z","sha256":"66b8f4fe53056761ae1d8afd61e0cb3af6464438a0374dbf80daaf92379db519","source":"ghsa-malware","versions":["4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"IN-MAL-2026-022443","import_time":"2026-10-30T12:42:31.223684242Z","modified_time":"2026-10-30T12:31:00Z","sha256":"21910c571efff594edeea9b9e967b84f8f8fa86b11174f676dc8a761cf1bf343","source":"amazon-inspector","versions":["4.1.2"]},{"id":"IN-MAL-2026-022442","import_time":"2026-10-30T12:42:31.167432513Z","modified_time":"2026-10-30T12:30:51Z","sha256":"d0ecfdc36fc274575fb367d3df93387ed3c5cc0572352b8e077ec5505b094baa","source":"amazon-inspector","versions":["4.1.5"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-02T11:17:43.336170592Z","modified_time":"2026-11-02T11:03:03Z","sha256":"3fe144c9e2ff4b36fdd3bd8bf7ca66bee3bea48c251a483f6b1f468f5c7c3546","source":"ghsa-malware","versions":["4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-02T16:19:46.13564019Z","modified_time":"2026-11-02T15:25:19Z","sha256":"cbce31a24505dcd05a2841e4e8971a5a2e01eb89da827127f71b18f545a64cda","source":"ghsa-malware","versions":["4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-03T07:19:14.724228761Z","modified_time":"2026-11-03T06:30:25Z","sha256":"2d9c8f21bba6f5e1cff13c10b4f52d2afb18d00a8bbfec08a88eae38b7821423","source":"ghsa-malware","versions":["4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-05T18:21:54.438920666Z","modified_time":"2026-11-05T17:20:29Z","sha256":"bae40e25df645fa18fa5416b76bd6e7134a44766c7de7e3f9882de590420c767","source":"ghsa-malware","versions":["4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-06T11:17:34.826372657Z","modified_time":"2026-11-06T10:56:31Z","sha256":"07938899da53f38def65eeba7d30ba8c2429fb55efa57f4eda2bc5714e4b31a1","source":"ghsa-malware","versions":["4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-09T14:19:43.00578014Z","modified_time":"2026-11-09T13:56:23Z","sha256":"eeedf7396a717db74be0a24ef5c23935d4e7356bb394c7927aea142b06177134","source":"ghsa-malware","versions":["4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-09T19:17:53.601228002Z","modified_time":"2026-11-09T18:14:38Z","sha256":"53d41795c59b295645ec63bea5fea0c2659bd666d4f8425445d04b08ea6117f5","source":"ghsa-malware","versions":["4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-10T00:36:49.285027376Z","modified_time":"2026-11-09T23:29:30Z","sha256":"513fdee759dc8c53edf0bdc2d8dcf18b9a22bd96cae5eb2515f5febe07ce90f9","source":"ghsa-malware","versions":["4.1.34","4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-13T12:23:26.557268266Z","modified_time":"2026-11-13T11:36:20Z","sha256":"838dbb7668097a3b7962c016179b91ed9f886479fb4327ad75217d97d9455cdc","source":"ghsa-malware","versions":["4.1.42","4.1.34","4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
\ No newline at end of file
+{"schema_version":"1.9.2","id":"MAL-2026-18193","published":"2026-10-22T18:35:11Z","modified":"2026-11-13T15:30:04.608744325Z","aliases":["GHSA-9855-prwc-mfp2"],"summary":"Malicious code in opencode-skills-collection (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941)\nPackage bundles a collection of skill directories containing various helper scripts. Static pattern matches fired on routine network primitives: a Python scraper (bundled-skills/junta-leiloeiros/scripts/base_scraper.py) and an API server script (serve_api.py) that reference `ping`/GET/POST, a benchmark harness (bundled-skills/loki-mode/benchmarks/run-benchmarks.sh), an rclone install helper (bundled-skills/rclone-cli/scripts/install.sh) that runs `curl https://rclone.org` to fetch the rclone installer from its official project domain, and a youtube-notetaker verification script using `curl` against GET endpoints. Matches reflect keyword co-occurrence (curl/ping/GET/POST) in utility scripts rather than exfiltration shapes: no hardcoded attacker C2, no reads of installer-side secret paths (~/.aws, ~/.ssh, ~/.npmrc), no environment scraping, no obfuscated destinations, and no install-time lifecycle hook that auto-executes these scripts. The rclone install.sh fetches from rclone's official domain, which is aggressive-but-legitimate runtime tool installation rather than a dropper. The scripts fire only when a user explicitly invokes the corresponding skill, not on `npm install`.\n\n## Source: ghsa-malware (c84dd18445ee7b0f29f3f76c81efb76a43fa7ef77d4c99b57245f4ef8e72a13a)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"opencode-skills-collection","ecosystem":"npm","purl":"pkg:npm/opencode-skills-collection"},"versions":["4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18","4.1.20","4.1.2","4.1.5","4.1.31","4.1.32","4.1.30","4.1.33","4.1.22","4.1.29","4.1.35","4.1.36","4.1.39","4.1.37","4.1.38","4.1.40","4.1.34","4.1.42","4.1.43"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"bundled-skills/junta-leiloeiros/scripts/scraper/base_scraper.py","sha256":"73408b41050dbf71476aa691bb608425a4a64532cc6864b29817e6e1afc63ff2","tlsh":"48f18432893668a2f5c3c8ad056df1a76812bd432d4c22317eec92140fdd43996f5dfa"},{"path":"bundled-skills/junta-leiloeiros/scripts/serve_api.py","sha256":"0a73f6e38c4853d7f4498b7537ccbc76e9cdadb1ff41253c2948b4da20981ac6","tlsh":"65b14f018c1d0461cb9386581f62e42272336e4b1e0876257bdf43b87fad17bacb669d"},{"path":"bundled-skills/loki-mode/benchmarks/run-benchmarks.sh","sha256":"16f15d42dfdfe5109b7590d611b973f837809f0c6adf82a94d8676e8e4771959","tlsh":"3153e991e8a5293344078734f68f62626631b6431b50642c7f8d42186f19f3aa7ef7bf"},{"path":"bundled-skills/rclone-cli/scripts/install.sh","sha256":"8485ae22413481077cafb7bf1d57f35f009f400a28deee666344981e98c4c9b4","tlsh":"f4a1324ae01463f26a924d6e7b53705da380826b3d90b57cb3af4b1c6f0532a61f279d"},{"path":"bundled-skills/youtube-notetaker/scripts/verify.sh","sha256":"1dbacc8b6ac6da39818847ebed953d999260eaaeb15a2e318764385c8532ed9e","tlsh":"9f210f24f400d17a776d28b47cc939de3e1b126f49ea2d14b687727910984fab83cb41"}],"package_integrity":[{"filename":"opencode-skills-collection-4.1.7.tgz","hashes":{"sha1":"9b34e5860b2149732cff37c3d5729a7bea59a666","sha512_sri":"sha512-0AvNrb2sZlGA9OuUUCtmAO1yZ0J4GMYohy7yKw4yD3YDllI18DQXG02n0cjluA4DxHoZUC0fBJwN+A4FXG1W5Q=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/opencode-skills-collection/MAL-2026-18193.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9855-prwc-mfp2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.11"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.13"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.12"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.17"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.7"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.0.77"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.8"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.18"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.10"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.16"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.9"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.0.57"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.0.56"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.19"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.14"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.20"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/opencode-skills-collection/v/4.1.5"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-10-22T19:22:11.783076653Z","modified_time":"2026-10-22T19:20:02Z","sha256":"c84dd18445ee7b0f29f3f76c81efb76a43fa7ef77d4c99b57245f4ef8e72a13a","source":"ghsa-malware","versions":["4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-10-22T20:25:48.905581489Z","modified_time":"2026-10-22T19:57:00Z","sha256":"7f9554768223a627ad7704e8825b53cf38951547f35dd2e747b067560562979f","source":"ghsa-malware","versions":["4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"IN-MAL-2026-022114","import_time":"2026-10-29T14:14:27.090315553Z","modified_time":"2026-10-29T13:50:41Z","sha256":"0ef3ce32c66764fd843324fcbf0467d95e38ded4c3778358f9a9983e1d88eb81","source":"amazon-inspector","versions":["4.1.1"]},{"id":"IN-MAL-2026-022185","import_time":"2026-10-29T14:14:32.740914307Z","modified_time":"2026-10-29T13:59:57Z","sha256":"0f6060bf9b062de87030e116099177fe1139d8fe492d3b7916ebf2bb0f4dc939","source":"amazon-inspector","versions":["4.1.6"]},{"id":"IN-MAL-2026-022246","import_time":"2026-10-29T14:14:37.296149633Z","modified_time":"2026-10-29T14:07:59Z","sha256":"959d4111548af2c6606e3348b009a9d438424db418dd2bc2f101aac2b0435793","source":"amazon-inspector","versions":["4.1.11"]},{"id":"IN-MAL-2026-022179","import_time":"2026-10-29T14:14:32.294072164Z","modified_time":"2026-10-29T13:59:12Z","sha256":"a0cc548c85008df9fb80c0c1883b39b2f7c019249d718085741380252fcc0a3f","source":"amazon-inspector","versions":["4.1.13"]},{"id":"IN-MAL-2026-022090","import_time":"2026-10-29T14:14:24.909245384Z","modified_time":"2026-10-29T13:47:28Z","sha256":"ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941","source":"amazon-inspector","versions":["4.1.12"]},{"id":"IN-MAL-2026-022121","import_time":"2026-10-29T14:14:27.67633539Z","modified_time":"2026-10-29T13:51:31Z","sha256":"154334b82c927a191e91994f527d770cb3f984c95740d832dd760aaff4251795","source":"amazon-inspector","versions":["4.1.0"]},{"id":"IN-MAL-2026-022180","import_time":"2026-10-29T14:14:32.374687096Z","modified_time":"2026-10-29T13:59:18Z","sha256":"2805226ddecf93034c614e75b1fde8f3479ba9d176b2be077c27265b8afaaf42","source":"amazon-inspector","versions":["4.1.17"]},{"id":"IN-MAL-2026-022184","import_time":"2026-10-29T14:14:32.667301006Z","modified_time":"2026-10-29T13:59:51Z","sha256":"4b370ecef32f75c304234d95aad45075178c1bb0f49b6390b3cdcf3c34b11ee0","source":"amazon-inspector","versions":["4.1.7"]},{"id":"IN-MAL-2026-022187","import_time":"2026-10-29T14:14:32.897184198Z","modified_time":"2026-10-29T14:00:19Z","sha256":"51a4eccc4d08f6fd3317d32a94cc65ae89145009b24ba50d8f0b810e8c90684b","source":"amazon-inspector","versions":["4.1.3"]},{"id":"IN-MAL-2026-022115","import_time":"2026-10-29T14:14:27.155365698Z","modified_time":"2026-10-29T13:50:48Z","sha256":"ea84433517366e479ab384361feea9117886b596b1dded9a54e0367339cc48d1","source":"amazon-inspector","versions":["4.0.77"]},{"id":"IN-MAL-2026-022186","import_time":"2026-10-29T14:14:32.811467778Z","modified_time":"2026-10-29T14:00:11Z","sha256":"f04ac946536f534c434638c42208b1b28e6b53c6d02b8dcdd263bc62d87a54ef","source":"amazon-inspector","versions":["4.1.4"]},{"id":"IN-MAL-2026-022183","import_time":"2026-10-29T14:14:32.596767174Z","modified_time":"2026-10-29T13:59:42Z","sha256":"0029ec54bda52537cccd9a907342f8a9fd1958e28fa1669f2f980ceb86a0930e","source":"amazon-inspector","versions":["4.1.8"]},{"id":"IN-MAL-2026-022178","import_time":"2026-10-29T14:14:32.231805466Z","modified_time":"2026-10-29T13:59:04Z","sha256":"0da45f9abc383cb78a9938c7a162879afdf4a04a257aa3f255608af37972844f","source":"amazon-inspector","versions":["4.1.18"]},{"id":"IN-MAL-2026-022113","import_time":"2026-10-29T14:14:26.979232509Z","modified_time":"2026-10-29T13:50:32Z","sha256":"5b3fc933b0130a8a2a8c3f52762f75ccdfea61ecb6049ce6beac9c332837d91b","source":"amazon-inspector","versions":["4.1.10"]},{"id":"IN-MAL-2026-022112","import_time":"2026-10-29T14:14:26.888589531Z","modified_time":"2026-10-29T13:50:25Z","sha256":"6fc59e1e0fe7b6cf0424a43decc7ea140fb353a4ab146691df9be5ad46be21ff","source":"amazon-inspector","versions":["4.1.16"]},{"id":"IN-MAL-2026-022182","import_time":"2026-10-29T14:14:32.512479943Z","modified_time":"2026-10-29T13:59:35Z","sha256":"cf2b098c0145a47baf06fe081c4f9e28ce91cf2920950d23590f6c4f117842c2","source":"amazon-inspector","versions":["4.1.9"]},{"id":"IN-MAL-2026-022116","import_time":"2026-10-29T14:14:27.240733053Z","modified_time":"2026-10-29T13:50:56Z","sha256":"d974034cdfef3f7bc43cd4faf7a153a8c5527bd56d5401dcfeee18b4438a48bd","source":"amazon-inspector","versions":["4.0.57"]},{"id":"IN-MAL-2026-022124","import_time":"2026-10-29T14:14:27.931542705Z","modified_time":"2026-10-29T13:52:01Z","sha256":"3ae0d7d01d6afaae966b6cbf761530c44d7155594bb13c7ae890eadb9f8fe4dd","source":"amazon-inspector","versions":["4.0.56"]},{"id":"IN-MAL-2026-022233","import_time":"2026-10-29T14:14:36.386191287Z","modified_time":"2026-10-29T14:06:09Z","sha256":"87fb5656dcf338932828d48081fd35939d8021b0427b1ccf8939b32dc2012be0","source":"amazon-inspector","versions":["4.1.19"]},{"id":"IN-MAL-2026-022181","import_time":"2026-10-29T14:14:32.439768676Z","modified_time":"2026-10-29T13:59:28Z","sha256":"b0135fc94540220bc4dfe2f66120b3a5998ca3b900fac412f72db49de411381d","source":"amazon-inspector","versions":["4.1.14"]},{"id":"IN-MAL-2026-022109","import_time":"2026-10-29T14:14:26.614042584Z","modified_time":"2026-10-29T13:49:56Z","sha256":"0a8991af13903dc263c114d5a81eff7b88269b668ee5ebac44b7bbb99ebba235","source":"amazon-inspector","versions":["4.1.20"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-10-29T18:23:53.761685354Z","modified_time":"2026-10-29T17:28:43Z","sha256":"66b8f4fe53056761ae1d8afd61e0cb3af6464438a0374dbf80daaf92379db519","source":"ghsa-malware","versions":["4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"IN-MAL-2026-022443","import_time":"2026-10-30T12:42:31.223684242Z","modified_time":"2026-10-30T12:31:00Z","sha256":"21910c571efff594edeea9b9e967b84f8f8fa86b11174f676dc8a761cf1bf343","source":"amazon-inspector","versions":["4.1.2"]},{"id":"IN-MAL-2026-022442","import_time":"2026-10-30T12:42:31.167432513Z","modified_time":"2026-10-30T12:30:51Z","sha256":"d0ecfdc36fc274575fb367d3df93387ed3c5cc0572352b8e077ec5505b094baa","source":"amazon-inspector","versions":["4.1.5"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-02T11:17:43.336170592Z","modified_time":"2026-11-02T11:03:03Z","sha256":"3fe144c9e2ff4b36fdd3bd8bf7ca66bee3bea48c251a483f6b1f468f5c7c3546","source":"ghsa-malware","versions":["4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-02T16:19:46.13564019Z","modified_time":"2026-11-02T15:25:19Z","sha256":"cbce31a24505dcd05a2841e4e8971a5a2e01eb89da827127f71b18f545a64cda","source":"ghsa-malware","versions":["4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-03T07:19:14.724228761Z","modified_time":"2026-11-03T06:30:25Z","sha256":"2d9c8f21bba6f5e1cff13c10b4f52d2afb18d00a8bbfec08a88eae38b7821423","source":"ghsa-malware","versions":["4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-05T18:21:54.438920666Z","modified_time":"2026-11-05T17:20:29Z","sha256":"bae40e25df645fa18fa5416b76bd6e7134a44766c7de7e3f9882de590420c767","source":"ghsa-malware","versions":["4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-06T11:17:34.826372657Z","modified_time":"2026-11-06T10:56:31Z","sha256":"07938899da53f38def65eeba7d30ba8c2429fb55efa57f4eda2bc5714e4b31a1","source":"ghsa-malware","versions":["4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-09T14:19:43.00578014Z","modified_time":"2026-11-09T13:56:23Z","sha256":"eeedf7396a717db74be0a24ef5c23935d4e7356bb394c7927aea142b06177134","source":"ghsa-malware","versions":["4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0","4.0.77","4.1.9","4.1.18"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-09T19:17:53.601228002Z","modified_time":"2026-11-09T18:14:38Z","sha256":"53d41795c59b295645ec63bea5fea0c2659bd666d4f8425445d04b08ea6117f5","source":"ghsa-malware","versions":["4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56","4.1.0"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-10T00:36:49.285027376Z","modified_time":"2026-11-09T23:29:30Z","sha256":"513fdee759dc8c53edf0bdc2d8dcf18b9a22bd96cae5eb2515f5febe07ce90f9","source":"ghsa-malware","versions":["4.1.34","4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12","4.0.56"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-13T12:23:26.557268266Z","modified_time":"2026-11-13T11:36:20Z","sha256":"838dbb7668097a3b7962c016179b91ed9f886479fb4327ad75217d97d9455cdc","source":"ghsa-malware","versions":["4.1.42","4.1.34","4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19","4.1.12"]},{"id":"GHSA-9855-prwc-mfp2","import_time":"2026-11-13T15:17:15.893705032Z","modified_time":"2026-11-13T14:49:38Z","sha256":"c3b2b997bcc93851995e3a7fb308f489500bf41cc2c96ee87550a89ad1bc897f","source":"ghsa-malware","versions":["4.1.43","4.1.42","4.1.34","4.1.37","4.1.38","4.1.40","4.1.39","4.1.36","4.1.35","4.1.30","4.1.33","4.1.22","4.1.29","4.1.32","4.1.31","4.1.2","4.1.5","4.1.20","4.1.10","4.0.57","4.1.11","4.1.16","4.1.13","4.1.6","4.1.3","4.1.4","4.1.1","4.1.8","4.1.7","4.1.17","4.1.14","4.1.19"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19236.json b/data/npm/MAL-2026-19236.json
new file mode 100644
index 0000000000..fc9810d8ae
--- /dev/null
+++ b/data/npm/MAL-2026-19236.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19236","published":"2026-11-13T14:03:07Z","modified":"2026-11-13T14:30:04.979960571Z","aliases":["GHSA-2hrf-5wrm-jw55"],"summary":"Malicious code in tailwindcss-animationkit (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (60bf05fcbc15d079acc3a0efde0cc55aad42586feaac72564c572a17312ef31e)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"tailwindcss-animationkit","ecosystem":"npm","purl":"pkg:npm/tailwindcss-animationkit"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tailwindcss-animationkit/MAL-2026-19236.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2hrf-5wrm-jw55"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-2hrf-5wrm-jw55","import_time":"2026-11-13T14:18:48.204561072Z","modified_time":"2026-11-13T14:03:07Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"60bf05fcbc15d079acc3a0efde0cc55aad42586feaac72564c572a17312ef31e","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19237.json b/data/npm/MAL-2026-19237.json
new file mode 100644
index 0000000000..9926149de6
--- /dev/null
+++ b/data/npm/MAL-2026-19237.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19237","published":"2026-11-13T15:06:11Z","modified":"2026-11-13T15:30:04.608618815Z","aliases":["GHSA-gw64-g39x-vqhr"],"summary":"Malicious code in berg-fonbock (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (9bd22b999f4114d3c02953978da99d34b6e3b912a2158e2448ddb95dd43f8f65)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"berg-fonbock","ecosystem":"npm","purl":"pkg:npm/berg-fonbock"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/berg-fonbock/MAL-2026-19237.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gw64-g39x-vqhr"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-gw64-g39x-vqhr","import_time":"2026-11-13T15:17:15.900662059Z","modified_time":"2026-11-13T15:06:11Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"9bd22b999f4114d3c02953978da99d34b6e3b912a2158e2448ddb95dd43f8f65","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19238.json b/data/npm/MAL-2026-19238.json
new file mode 100644
index 0000000000..b1297a6e3c
--- /dev/null
+++ b/data/npm/MAL-2026-19238.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19238","published":"2026-11-13T14:58:36Z","modified":"2026-11-13T15:30:04.553477688Z","aliases":["GHSA-q7wh-hgh8-x5hw"],"summary":"Malicious code in celest-browser (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (1f44b0d75d203620f6862b6f9c8c4232bc718044c5c0d82ce7b1ee5b53f8f856)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"celest-browser","ecosystem":"npm","purl":"pkg:npm/celest-browser"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/celest-browser/MAL-2026-19238.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q7wh-hgh8-x5hw"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-q7wh-hgh8-x5hw","import_time":"2026-11-13T15:17:15.907097167Z","modified_time":"2026-11-13T14:58:36Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"1f44b0d75d203620f6862b6f9c8c4232bc718044c5c0d82ce7b1ee5b53f8f856","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19239.json b/data/npm/MAL-2026-19239.json
new file mode 100644
index 0000000000..8ad4c8919e
--- /dev/null
+++ b/data/npm/MAL-2026-19239.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19239","published":"2026-11-13T15:01:00Z","modified":"2026-11-13T15:30:04.537115507Z","aliases":["GHSA-5c87-58w4-f8xf"],"summary":"Malicious code in sol-wallet-adapater (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (1a0fda0d27ca044a920f88c9e782ada7d1d1953ccb455eeb804f2582e31efb6f)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"sol-wallet-adapater","ecosystem":"npm","purl":"pkg:npm/sol-wallet-adapater"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sol-wallet-adapater/MAL-2026-19239.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-5c87-58w4-f8xf"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-5c87-58w4-f8xf","import_time":"2026-11-13T15:17:15.879503132Z","modified_time":"2026-11-13T15:01:00Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"1a0fda0d27ca044a920f88c9e782ada7d1d1953ccb455eeb804f2582e31efb6f","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19240.json b/data/npm/MAL-2026-19240.json
new file mode 100644
index 0000000000..2aa3eec816
--- /dev/null
+++ b/data/npm/MAL-2026-19240.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19240","published":"2026-11-13T15:31:57Z","modified":"2026-11-13T16:30:05.095568253Z","aliases":["GHSA-v22r-22vf-5p3c"],"summary":"Malicious code in @ewms/el-bootstrap (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (10e12de4ab8ea89a04dd97c5c061e06cabeef4a8120475653a5c5d67efac46cf)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@ewms/el-bootstrap","ecosystem":"npm","purl":"pkg:npm/%40ewms/el-bootstrap"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ewms/el-bootstrap/MAL-2026-19240.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-v22r-22vf-5p3c"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-v22r-22vf-5p3c","import_time":"2026-11-13T16:19:30.250388224Z","modified_time":"2026-11-13T15:32:06Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"10e12de4ab8ea89a04dd97c5c061e06cabeef4a8120475653a5c5d67efac46cf","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19241.json b/data/npm/MAL-2026-19241.json
new file mode 100644
index 0000000000..d0a63cedce
--- /dev/null
+++ b/data/npm/MAL-2026-19241.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19241","published":"2026-11-13T16:04:26Z","modified":"2026-11-13T16:30:05.796771909Z","aliases":["GHSA-rm59-wxgp-7g45"],"summary":"Malicious code in hxqrtv-bznwkp-util (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (a7c027dbde359bbc3cdc4d805b047da1a071f8abf8302fc74fab8ec3d3111d19)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"hxqrtv-bznwkp-util","ecosystem":"npm","purl":"pkg:npm/hxqrtv-bznwkp-util"},"versions":["1.0.0","0.0.0-stage"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/hxqrtv-bznwkp-util/MAL-2026-19241.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-rm59-wxgp-7g45"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-rm59-wxgp-7g45","import_time":"2026-11-13T16:19:30.165224339Z","modified_time":"2026-11-13T16:04:26Z","sha256":"a7c027dbde359bbc3cdc4d805b047da1a071f8abf8302fc74fab8ec3d3111d19","source":"ghsa-malware","versions":["1.0.0","0.0.0-stage"]}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19243.json b/data/npm/MAL-2026-19243.json
new file mode 100644
index 0000000000..fe3b1d0f43
--- /dev/null
+++ b/data/npm/MAL-2026-19243.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19243","published":"2026-11-13T16:30:29Z","modified":"2026-11-13T17:26:03.224783Z","aliases":["GHSA-vp2q-gp5r-xh5j"],"summary":"Malicious code in @claudecode/cli (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (a9e0b2b9dc1114dbabe855406fc8f343558558c6243f84a718dfff429d9f3e41)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@claudecode/cli","ecosystem":"npm","purl":"pkg:npm/%40claudecode/cli"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@claudecode/cli/MAL-2026-19243.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vp2q-gp5r-xh5j"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-vp2q-gp5r-xh5j","import_time":"2026-11-13T17:16:46.629407031Z","modified_time":"2026-11-13T16:30:30Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"a9e0b2b9dc1114dbabe855406fc8f343558558c6243f84a718dfff429d9f3e41","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19244.json b/data/npm/MAL-2026-19244.json
new file mode 100644
index 0000000000..7e895dc6a7
--- /dev/null
+++ b/data/npm/MAL-2026-19244.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19244","published":"2026-11-13T16:50:01Z","modified":"2026-11-13T17:27:39.821256404Z","aliases":["GHSA-59gv-286x-7347"],"summary":"Malicious code in ansi-sanitize (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (dac0e539244277d587ecbf1c975059866a0f822b5f4c482adf2af2e2c16beeba)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"ansi-sanitize","ecosystem":"npm","purl":"pkg:npm/ansi-sanitize"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ansi-sanitize/MAL-2026-19244.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-59gv-286x-7347"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-59gv-286x-7347","import_time":"2026-11-13T17:16:46.590451027Z","modified_time":"2026-11-13T16:50:01Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"dac0e539244277d587ecbf1c975059866a0f822b5f4c482adf2af2e2c16beeba","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19245.json b/data/npm/MAL-2026-19245.json
new file mode 100644
index 0000000000..6379f7d95e
--- /dev/null
+++ b/data/npm/MAL-2026-19245.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19245","published":"2026-11-13T16:22:56Z","modified":"2026-11-13T17:29:15.715916549Z","aliases":["GHSA-xqvf-vmv8-fhw5"],"summary":"Malicious code in casamare (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (aba6087ce6d237658ceaa9b05b320398ebf798d3f2a84dd371c8b64b72bedf9f)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"casamare","ecosystem":"npm","purl":"pkg:npm/casamare"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/casamare/MAL-2026-19245.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-xqvf-vmv8-fhw5"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-xqvf-vmv8-fhw5","import_time":"2026-11-13T17:16:46.670032761Z","modified_time":"2026-11-13T16:23:11Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"aba6087ce6d237658ceaa9b05b320398ebf798d3f2a84dd371c8b64b72bedf9f","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19246.json b/data/npm/MAL-2026-19246.json
new file mode 100644
index 0000000000..b11c8c5eba
--- /dev/null
+++ b/data/npm/MAL-2026-19246.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19246","published":"2026-11-13T16:50:01Z","modified":"2026-11-13T17:30:15.907681129Z","aliases":["GHSA-949g-9w76-cwfw"],"summary":"Malicious code in lineparse (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (fe3779dfeae6f7738a41555ba25af498b536306bcf3bd8b3d2e09baa64e6a7f7)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"lineparse","ecosystem":"npm","purl":"pkg:npm/lineparse"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/lineparse/MAL-2026-19246.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-949g-9w76-cwfw"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-949g-9w76-cwfw","import_time":"2026-11-13T17:16:46.595851884Z","modified_time":"2026-11-13T16:50:02Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"fe3779dfeae6f7738a41555ba25af498b536306bcf3bd8b3d2e09baa64e6a7f7","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19248.json b/data/npm/MAL-2026-19248.json
new file mode 100644
index 0000000000..1110d7c501
--- /dev/null
+++ b/data/npm/MAL-2026-19248.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19248","published":"2026-11-13T17:54:46Z","modified":"2026-11-13T18:30:04.232695445Z","aliases":["GHSA-53j8-546c-mr27"],"summary":"Malicious code in dowload_ebok_can_i_let_you_go_part_3_of_3_by_cathy_glass_3ciom (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (91c18a00ef8f00a09c596a5c3ebbc9b347e9e20f5da4990c73eab35ba612a320)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_can_i_let_you_go_part_3_of_3_by_cathy_glass_3ciom","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_can_i_let_you_go_part_3_of_3_by_cathy_glass_3ciom"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_can_i_let_you_go_part_3_of_3_by_cathy_glass_3ciom/MAL-2026-19248.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-53j8-546c-mr27"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-53j8-546c-mr27","import_time":"2026-11-13T18:18:54.170154032Z","modified_time":"2026-11-13T17:54:55Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"91c18a00ef8f00a09c596a5c3ebbc9b347e9e20f5da4990c73eab35ba612a320","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19249.json b/data/npm/MAL-2026-19249.json
new file mode 100644
index 0000000000..05a96e4093
--- /dev/null
+++ b/data/npm/MAL-2026-19249.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19249","published":"2026-11-13T17:54:46Z","modified":"2026-11-13T18:30:04.236957610Z","aliases":["GHSA-qg34-5j2x-vwqg"],"summary":"Malicious code in dowload_ebok_energy_balls_by_christal_sczebel_oybjj (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (e67b4379e580646f279d345f68b352d6e4db2111b54a83f7471809660c799a00)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_energy_balls_by_christal_sczebel_oybjj","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_energy_balls_by_christal_sczebel_oybjj"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_energy_balls_by_christal_sczebel_oybjj/MAL-2026-19249.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qg34-5j2x-vwqg"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-qg34-5j2x-vwqg","import_time":"2026-11-13T18:18:54.184413125Z","modified_time":"2026-11-13T17:54:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"e67b4379e580646f279d345f68b352d6e4db2111b54a83f7471809660c799a00","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19250.json b/data/npm/MAL-2026-19250.json
new file mode 100644
index 0000000000..2ed8efcd5d
--- /dev/null
+++ b/data/npm/MAL-2026-19250.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19250","published":"2026-11-13T17:54:45Z","modified":"2026-11-13T18:30:04.234968659Z","aliases":["GHSA-r3xr-2xxw-q6pg"],"summary":"Malicious code in dowload_ebok_la_gran_aventura_de_la_pequena_ranita_by_mark_lesky_dlmix (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (5abcc8a6c98fb155efa915f630788249a4b574b9aea12fbdbc521750de3e2297)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_la_gran_aventura_de_la_pequena_ranita_by_mark_lesky_dlmix","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_la_gran_aventura_de_la_pequena_ranita_by_mark_lesky_dlmix"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_la_gran_aventura_de_la_pequena_ranita_by_mark_lesky_dlmix/MAL-2026-19250.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-r3xr-2xxw-q6pg"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-r3xr-2xxw-q6pg","import_time":"2026-11-13T18:18:54.18533376Z","modified_time":"2026-11-13T17:54:46Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"5abcc8a6c98fb155efa915f630788249a4b574b9aea12fbdbc521750de3e2297","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19251.json b/data/npm/MAL-2026-19251.json
new file mode 100644
index 0000000000..e832ea2563
--- /dev/null
+++ b/data/npm/MAL-2026-19251.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19251","published":"2026-11-13T17:54:46Z","modified":"2026-11-13T18:30:04.222908285Z","aliases":["GHSA-3387-5fx6-8cjv"],"summary":"Malicious code in dowload_ebok_la_huitieme_vibration_by_carlo_lucarelli_fa21i (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (2af3a91d7491ec9dd1ce671f9759468c1c07216cd2fae854374468940403204c)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_la_huitieme_vibration_by_carlo_lucarelli_fa21i","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_la_huitieme_vibration_by_carlo_lucarelli_fa21i"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_la_huitieme_vibration_by_carlo_lucarelli_fa21i/MAL-2026-19251.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-3387-5fx6-8cjv"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-3387-5fx6-8cjv","import_time":"2026-11-13T18:18:54.114859316Z","modified_time":"2026-11-13T17:54:55Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"2af3a91d7491ec9dd1ce671f9759468c1c07216cd2fae854374468940403204c","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19252.json b/data/npm/MAL-2026-19252.json
new file mode 100644
index 0000000000..22c4b9443a
--- /dev/null
+++ b/data/npm/MAL-2026-19252.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19252","published":"2026-11-13T17:54:45Z","modified":"2026-11-13T18:30:04.755832682Z","aliases":["GHSA-wh8h-578j-wh6x"],"summary":"Malicious code in dowload_ebok_love_and_trouble_memoirs_of_a_former_wild_girl_by_claire_dederer_4z18t (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (4774a91cf69db49922a183edd96759855b369835574fa53c2fed7fe13431c529)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_love_and_trouble_memoirs_of_a_former_wild_girl_by_claire_dederer_4z18t","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_love_and_trouble_memoirs_of_a_former_wild_girl_by_claire_dederer_4z18t"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_love_and_trouble_memoirs_of_a_former_wild_girl_by_claire_dederer_4z18t/MAL-2026-19252.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-wh8h-578j-wh6x"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-wh8h-578j-wh6x","import_time":"2026-11-13T18:18:54.190675994Z","modified_time":"2026-11-13T17:54:46Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"4774a91cf69db49922a183edd96759855b369835574fa53c2fed7fe13431c529","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19253.json b/data/npm/MAL-2026-19253.json
new file mode 100644
index 0000000000..e1bbb30a40
--- /dev/null
+++ b/data/npm/MAL-2026-19253.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19253","published":"2026-11-13T17:54:46Z","modified":"2026-11-13T18:30:04.235513369Z","aliases":["GHSA-x3cj-p89g-wm2h"],"summary":"Malicious code in dowload_ebok_massacre_a_odessa_ko_tome_1_by_alex_de_brienne_1ewma (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (2bade2ea9d9c1042d900924ed8f66a01c94cb79d0229b4dabe8db7d40205aef4)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_massacre_a_odessa_ko_tome_1_by_alex_de_brienne_1ewma","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_massacre_a_odessa_ko_tome_1_by_alex_de_brienne_1ewma"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_massacre_a_odessa_ko_tome_1_by_alex_de_brienne_1ewma/MAL-2026-19253.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-x3cj-p89g-wm2h"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-x3cj-p89g-wm2h","import_time":"2026-11-13T18:18:54.191333278Z","modified_time":"2026-11-13T17:54:46Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"2bade2ea9d9c1042d900924ed8f66a01c94cb79d0229b4dabe8db7d40205aef4","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19254.json b/data/npm/MAL-2026-19254.json
new file mode 100644
index 0000000000..3884c54f36
--- /dev/null
+++ b/data/npm/MAL-2026-19254.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19254","published":"2026-11-13T17:54:46Z","modified":"2026-11-13T18:30:04.232486571Z","aliases":["GHSA-h2r2-j42g-2p78"],"summary":"Malicious code in dowload_ebok_the_riviera_set_by_mary_s_lovell_l7i1k (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (30f138b9f05c62465de84537e1c668f27bfbd48a351c2a566eafd0ba125b4f27)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_the_riviera_set_by_mary_s_lovell_l7i1k","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_the_riviera_set_by_mary_s_lovell_l7i1k"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_the_riviera_set_by_mary_s_lovell_l7i1k/MAL-2026-19254.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-h2r2-j42g-2p78"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-h2r2-j42g-2p78","import_time":"2026-11-13T18:18:54.180137564Z","modified_time":"2026-11-13T17:54:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"30f138b9f05c62465de84537e1c668f27bfbd48a351c2a566eafd0ba125b4f27","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19255.json b/data/npm/MAL-2026-19255.json
new file mode 100644
index 0000000000..3970015d69
--- /dev/null
+++ b/data/npm/MAL-2026-19255.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19255","published":"2026-11-13T17:54:46Z","modified":"2026-11-13T18:30:04.221462491Z","aliases":["GHSA-v6jm-rfjh-x74x"],"summary":"Malicious code in dowload_ebok_titan_by_dan_abnett_8ace4 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (ada299e06a104d43c9f60c64ddd23a92a7063de0a93f08913f3ffaf8e6b9d870)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"dowload_ebok_titan_by_dan_abnett_8ace4","ecosystem":"npm","purl":"pkg:npm/dowload_ebok_titan_by_dan_abnett_8ace4"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dowload_ebok_titan_by_dan_abnett_8ace4/MAL-2026-19255.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-v6jm-rfjh-x74x"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-v6jm-rfjh-x74x","import_time":"2026-11-13T18:18:54.187997791Z","modified_time":"2026-11-13T17:54:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"ada299e06a104d43c9f60c64ddd23a92a7063de0a93f08913f3ffaf8e6b9d870","source":"ghsa-malware"}]}}
\ No newline at end of file
diff --git a/data/npm/MAL-2026-19256.json b/data/npm/MAL-2026-19256.json
new file mode 100644
index 0000000000..1f98028146
--- /dev/null
+++ b/data/npm/MAL-2026-19256.json
@@ -0,0 +1 @@
+{"schema_version":"1.9.2","id":"MAL-2026-19256","published":"2026-11-13T17:58:54Z","modified":"2026-11-13T18:30:04.217772796Z","aliases":["GHSA-vh6f-827c-9wqg"],"summary":"Malicious code in node-global-key-listener-v9 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (2543d134f7de5125301fa38e04fad060cd46b738719e128f1a15381094c98341)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"node-global-key-listener-v9","ecosystem":"npm","purl":"pkg:npm/node-global-key-listener-v9"},"versions":["0.3.7","0.3.6","0.3.5","0.3.4","0.3.3","0.3.2","0.3.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/node-global-key-listener-v9/MAL-2026-19256.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vh6f-827c-9wqg"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-vh6f-827c-9wqg","import_time":"2026-11-13T18:18:54.189101939Z","modified_time":"2026-11-13T17:59:00Z","sha256":"2543d134f7de5125301fa38e04fad060cd46b738719e128f1a15381094c98341","source":"ghsa-malware","versions":["0.3.7","0.3.6","0.3.5","0.3.4","0.3.3","0.3.2","0.3.1"]}]}}
\ No newline at end of file
diff --git a/state/sync.json b/state/sync.json
index 88329281e9..fcf7b1f4b9 100644
--- a/state/sync.json
+++ b/state/sync.json
@@ -25,9 +25,9 @@
       "records": 2012
     },
     "OSS-Fuzz": {
-      "etag": "\"6c97ed44daceb2a612339d618e905334\"",
-      "last_modified": "Fri, 13 Nov 2026 12:33:09 GMT",
-      "last_success": "2026-11-13T12:43:49.158133+00:00",
+      "etag": "\"b535da55689a822e6ed3c9207b95386f\"",
+      "last_modified": "Fri, 13 Nov 2026 14:32:51 GMT",
+      "last_success": "2026-11-13T18:44:09.619697+00:00",
       "records": 4294
     },
     "Packagist": {
@@ -37,28 +37,28 @@
       "records": 7448
     },
     "PyPI": {
-      "etag": "\"f305f162c4a39523034d0f5819e21ab0\"",
-      "last_modified": "Fri, 13 Nov 2026 04:32:56 GMT",
-      "last_success": "2026-11-13T06:41:39.697038+00:00",
-      "records": 26890
+      "etag": "\"719d17ae808ac01ea858eaf9ee81c4f7\"",
+      "last_modified": "Fri, 13 Nov 2026 18:18:59 GMT",
+      "last_success": "2026-11-13T18:42:04.894340+00:00",
+      "records": 26895
     },
     "RubyGems": {
-      "etag": "\"49f8259bae6ec9e7c27660fb978c86c8\"",
-      "last_modified": "Fri, 13 Nov 2026 00:03:09 GMT",
-      "last_success": "2026-11-13T00:43:59.173191+00:00",
-      "records": 5528
+      "etag": "\"b930c1752f3a40812b63d1f681eb5080\"",
+      "last_modified": "Fri, 13 Nov 2026 18:18:58 GMT",
+      "last_success": "2026-11-13T18:44:06.475765+00:00",
+      "records": 5531
     },
     "crates.io": {
-      "etag": "\"49180920008a62f765672f15eb054575\"",
-      "last_modified": "Thu, 12 Nov 2026 22:18:06 GMT",
-      "last_success": "2026-11-13T00:43:49.981661+00:00",
-      "records": 3127
+      "etag": "\"7b6615ee1c6993e3038342fdba582bc6\"",
+      "last_modified": "Fri, 13 Nov 2026 15:48:17 GMT",
+      "last_success": "2026-11-13T18:44:02.646887+00:00",
+      "records": 3146
     },
     "npm": {
-      "etag": "\"5f5445402430fbe0787ee641452066f1\"",
-      "last_modified": "Fri, 13 Nov 2026 12:33:13 GMT",
-      "last_success": "2026-11-13T12:43:40.829424+00:00",
-      "records": 231770
+      "etag": "\"ff7f98c18cd4061ef663b4bd71c78919\"",
+      "last_modified": "Fri, 13 Nov 2026 18:33:19 GMT",
+      "last_success": "2026-11-13T18:43:58.305855+00:00",
+      "records": 231790
     }
   },
   "version": 1