From 707ea4f4095211c90115f2a508ae33f3c1055d17 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 08:01:14 -0400 Subject: [PATCH 1/3] Correct Mise credential command fixed version --- .../06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json b/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json index 584513a9fdd7c..ba2a4a5112c5f 100644 --- a/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json +++ b/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json @@ -28,7 +28,7 @@ "introduced": "2026.3.15" }, { - "fixed": "2026.6.4" + "fixed": "2026.6.5" } ] } @@ -40,6 +40,14 @@ "type": "WEB", "url": "https://github.com/jdx/mise/security/advisories/GHSA-29hf-rm4x-xxph" }, + { + "type": "WEB", + "url": "https://github.com/jdx/mise/releases/tag/v2026.6.5" + }, + { + "type": "WEB", + "url": "https://github.com/jdx/mise/commit/15e97c48bfb0ef835f49d6ce50b41b5653550869" + }, { "type": "PACKAGE", "url": "https://github.com/jdx/mise" @@ -54,4 +62,4 @@ "github_reviewed_at": "2026-06-23T18:24:28Z", "nvd_published_at": null } -} \ No newline at end of file +} From 6e5a82051f0cf6ac99622696fea4aafc7143cb08 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 12:31:07 -0400 Subject: [PATCH 2/3] Add Mise credential command NVD reference --- .../2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json b/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json index ba2a4a5112c5f..90ea8642cb133 100644 --- a/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json +++ b/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/jdx/mise/commit/15e97c48bfb0ef835f49d6ce50b41b5653550869" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55448" + }, { "type": "PACKAGE", "url": "https://github.com/jdx/mise" From f9c7686a7f121d77320f3db62917d98017a24d3c Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 20:37:41 -0400 Subject: [PATCH 3/3] Set Mise credential command NVD published timestamp --- .../2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json b/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json index 90ea8642cb133..50b4b8822f51d 100644 --- a/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json +++ b/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json @@ -64,6 +64,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2026-06-23T18:24:28Z", - "nvd_published_at": null + "nvd_published_at": "2026-06-26T18:17:01Z" } }