From 5581130b1c258302988990266387b2a7f81c9946 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 09:16:20 -0400
Subject: [PATCH] Add Agentic-Flow command injection fix references

---
 .../2026/06/GHSA-vcv2-r9jh-99m5/GHSA-vcv2-r9jh-99m5.json  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-vcv2-r9jh-99m5/GHSA-vcv2-r9jh-99m5.json b/advisories/github-reviewed/2026/06/GHSA-vcv2-r9jh-99m5/GHSA-vcv2-r9jh-99m5.json
index b2769dcc9feb7..dd5c3ab267450 100644
--- a/advisories/github-reviewed/2026/06/GHSA-vcv2-r9jh-99m5/GHSA-vcv2-r9jh-99m5.json
+++ b/advisories/github-reviewed/2026/06/GHSA-vcv2-r9jh-99m5/GHSA-vcv2-r9jh-99m5.json
@@ -53,10 +53,18 @@
       "type": "WEB",
       "url": "https://github.com/ruvnet/agentic-flow/pull/170"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ruvnet/agentic-flow/commit/a0f9c2bf95b6203b3e1b24f92a7e390d6774de13"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/ruvnet/ruflo/pull/2415"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ruvnet/ruflo/commit/da901d06cc5661ebf3f66a962dc116464e7980b0"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/ruvnet/agentic-flow"