From 62ce04570c3e4fe6b5c169c4003385bcfa0e8414 Mon Sep 17 00:00:00 2001
From: Paul McCarty <6mile@linux.com>
Date: Sat, 24 Oct 2026 08:38:06 +1000
Subject: [PATCH] Improve GHSA-9v8h-qqgm-4m35

---
 .../2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json b/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json
index 9d6c092cbe6..8a8d32a2cda 100644
--- a/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json
+++ b/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9v8h-qqgm-4m35",
-  "modified": "2026-10-23T19:08:09Z",
+  "modified": "2026-10-23T19:08:11Z",
   "published": "2026-10-22T15:32:49Z",
   "aliases": [],
   "summary": "Brotli: Out-of-bounds write in the Brotli decoder (\"Node2Shell\") also affects the PyPI Brotli package",
@@ -23,7 +23,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "1.0.3"
+              "introduced": "0.5.2"
             },
             {
               "fixed": "1.2.1"
@@ -42,7 +42,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "1.0.3"
+              "introduced": "0.8.0"
             },
             {
               "fixed": "1.2.1.0"
@@ -124,7 +124,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-252"
+      "CWE-252",
+      "CWE-787"
     ],
     "severity": "CRITICAL",
     "github_reviewed": true,