From 460cc46bb5dc760816d33b0615618baabbe8dc93 Mon Sep 17 00:00:00 2001
From: cuauht <56906846+cuauht@users.noreply.github.com>
Date: Thu, 6 Aug 2026 20:59:14 -0600
Subject: [PATCH] GHSA-7gfh-x38p-prh3: add reporter's technical analysis as a
 reference

---
 .../2026/07/GHSA-7gfh-x38p-prh3/GHSA-7gfh-x38p-prh3.json      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/advisories/github-reviewed/2026/07/GHSA-7gfh-x38p-prh3/GHSA-7gfh-x38p-prh3.json b/advisories/github-reviewed/2026/07/GHSA-7gfh-x38p-prh3/GHSA-7gfh-x38p-prh3.json
index b1ea1df35c17..3119e7c982c0 100644
--- a/advisories/github-reviewed/2026/07/GHSA-7gfh-x38p-prh3/GHSA-7gfh-x38p-prh3.json
+++ b/advisories/github-reviewed/2026/07/GHSA-7gfh-x38p-prh3/GHSA-7gfh-x38p-prh3.json
@@ -56,6 +56,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/shepherdwind/velocity.js/releases/tag/v2.1.7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackzero.ai/learn/velocity-js-rce"
     }
   ],
   "database_specific": {