From defb1fe3e0e78ac64115bb39319f74e038036805 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 17:11:48 -0400
Subject: [PATCH] Add Hugo code block XSS fix references

---
 .../06/GHSA-q76j-gcg9-vxc6/GHSA-q76j-gcg9-vxc6.json    | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-q76j-gcg9-vxc6/GHSA-q76j-gcg9-vxc6.json b/advisories/github-reviewed/2026/06/GHSA-q76j-gcg9-vxc6/GHSA-q76j-gcg9-vxc6.json
index f2ffc8b7b3818..80baaab3d6003 100644
--- a/advisories/github-reviewed/2026/06/GHSA-q76j-gcg9-vxc6/GHSA-q76j-gcg9-vxc6.json
+++ b/advisories/github-reviewed/2026/06/GHSA-q76j-gcg9-vxc6/GHSA-q76j-gcg9-vxc6.json
@@ -38,9 +38,17 @@
       "type": "WEB",
       "url": "https://github.com/gohugoio/hugo/security/advisories/GHSA-q76j-gcg9-vxc6"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gohugoio/hugo/commit/ce1a7e0bce3713af40496ded3c2c0ceeed49231d"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/gohugoio/hugo"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gohugoio/hugo/releases/tag/v0.163.3"
     }
   ],
   "database_specific": {
@@ -52,4 +60,4 @@
     "github_reviewed_at": "2026-06-19T17:45:27Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}