From 8081e8728c60867938349160450fa2989f36fdc4 Mon Sep 17 00:00:00 2001
From: Till <92382209+Sch8ill@users.noreply.github.com>
Date: Sun, 19 Jul 2026 21:39:18 +0200
Subject: [PATCH 1/2] Improve GHSA-p7gf-g6r8-g65h

---
 .../GHSA-p7gf-g6r8-g65h.json                  | 25 +++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json b/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json
index 48dba3f30cc5a..0191455707162 100644
--- a/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json
+++ b/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json
@@ -6,6 +6,7 @@
   "aliases": [
     "CVE-2026-31309"
   ],
+  "summary": "Affected package/versions",
   "details": "Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node before v1.36.0 allows unauthenticated attackers to arbitrarily overwrite the node's configuration and achieve a full node takeover via supplying a crafted POST request.",
   "severity": [
     {
@@ -13,7 +14,27 @@
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/mysteriumnetwork/node"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.21.1-rc0"
+            },
+            {
+              "fixed": "1.36.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
@@ -28,7 +49,7 @@
       "url": "https://github.com/mysteriumnetwork/node/commit/bc099fcaff59fee9c8a8f8e07ffff5b3c5df2bb9"
     },
     {
-      "type": "WEB",
+      "type": "PACKAGE",
       "url": "https://github.com/mysteriumnetwork/node"
     },
     {

From a8b5e71020e29f080ff0e3efae3ec125e28a4259 Mon Sep 17 00:00:00 2001
From: Till <92382209+Sch8ill@users.noreply.github.com>
Date: Sun, 19 Jul 2026 22:11:10 +0200
Subject: [PATCH 2/2] Improve GHSA-p7gf-g6r8-g65h

---
 .../2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json b/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json
index 0191455707162..440c0f93d1468 100644
--- a/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json
+++ b/advisories/unreviewed/2026/07/GHSA-p7gf-g6r8-g65h/GHSA-p7gf-g6r8-g65h.json
@@ -6,7 +6,7 @@
   "aliases": [
     "CVE-2026-31309"
   ],
-  "summary": "Affected package/versions",
+  "summary": "Mysterium Node: Improper authorization in TequilAPI configuration endpoint",
   "details": "Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node before v1.36.0 allows unauthenticated attackers to arbitrarily overwrite the node's configuration and achieve a full node takeover via supplying a crafted POST request.",
   "severity": [
     {