From e7eb0fcedce442ad250804b55a9149f993ad137f Mon Sep 17 00:00:00 2001
From: Bader <127010643+sealbenb@users.noreply.github.com>
Date: Thu, 25 Jun 2026 17:41:59 +0300
Subject: [PATCH 1/4] Improve GHSA-8gqp-hr9g-pg62

---
 .../GHSA-8gqp-hr9g-pg62.json                  | 29 ++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json b/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
index b3d68b43f4362..e8df0bc04d9d3 100644
--- a/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
+++ b/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
@@ -25,7 +25,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "3.16.0"
             },
             {
               "fixed": "3.21.13"
@@ -33,6 +33,25 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.netflix.conductor:conductor-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.7.0"
+            },
+            {
+              "last_affected": "3.15.0"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [
@@ -40,10 +59,18 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26074"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/conductor-oss/conductor/commit/a8f1260105f59d3603e056f999392bc020f07145"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/conductor-oss/conductor/commit/e9816501df1e364a3d39d7fe37d6e167c40eaa1b"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/conductor-oss/conductor/commit/f743a37c8f773d82d3a9cd0c64cc6fda81fab0aa"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/conductor-oss/conductor"

From 1d63aabe9ccfc110438831a50aa5eeb251d1bbe7 Mon Sep 17 00:00:00 2001
From: Bader <127010643+sealbenb@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:37:36 +0300
Subject: [PATCH 2/4] Improve GHSA-8gqp-hr9g-pg62

---
 .../GHSA-8gqp-hr9g-pg62.json                  | 31 ++-----------------
 1 file changed, 2 insertions(+), 29 deletions(-)

diff --git a/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json b/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
index e8df0bc04d9d3..244aaba041b6d 100644
--- a/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
+++ b/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
@@ -25,29 +25,10 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "3.16.0"
+              "introduced": "0"
             },
             {
-              "fixed": "3.21.13"
-            }
-          ]
-        }
-      ]
-    },
-    {
-      "package": {
-        "ecosystem": "Maven",
-        "name": "com.netflix.conductor:conductor-core"
-      },
-      "ranges": [
-        {
-          "type": "ECOSYSTEM",
-          "events": [
-            {
-              "introduced": "1.7.0"
-            },
-            {
-              "last_affected": "3.15.0"
+              "fixed": "3.21.21"
             }
           ]
         }
@@ -59,18 +40,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26074"
     },
-    {
-      "type": "WEB",
-      "url": "https://github.com/conductor-oss/conductor/commit/a8f1260105f59d3603e056f999392bc020f07145"
-    },
     {
       "type": "WEB",
       "url": "https://github.com/conductor-oss/conductor/commit/e9816501df1e364a3d39d7fe37d6e167c40eaa1b"
     },
-    {
-      "type": "WEB",
-      "url": "https://github.com/conductor-oss/conductor/commit/f743a37c8f773d82d3a9cd0c64cc6fda81fab0aa"
-    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/conductor-oss/conductor"

From 9dd4ef3de1e1634fcd07e6e15ac13239342a50c1 Mon Sep 17 00:00:00 2001
From: Bader <127010643+sealbenb@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:50:46 +0300
Subject: [PATCH 3/4] Improve GHSA-8gqp-hr9g-pg62


From 576535fc5f4fc851250d94d9ae9c63bdb1b8cd50 Mon Sep 17 00:00:00 2001
From: Bader <127010643+sealbenb@users.noreply.github.com>
Date: Tue, 7 Jul 2026 17:04:02 +0300
Subject: [PATCH 4/4] Improve GHSA-8gqp-hr9g-pg62

---
 .../GHSA-8gqp-hr9g-pg62.json                  | 21 ++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json b/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
index 244aaba041b6d..6486b38264030 100644
--- a/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
+++ b/advisories/github-reviewed/2025/06/GHSA-8gqp-hr9g-pg62/GHSA-8gqp-hr9g-pg62.json
@@ -25,7 +25,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "3.16.0"
             },
             {
               "fixed": "3.21.21"
@@ -33,6 +33,25 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.netflix.conductor:conductor-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.7.0"
+            },
+            {
+              "last_affected": "3.15.0"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [