From 35aff01be5fd77d9dceafa06911dcf265b8d2551 Mon Sep 17 00:00:00 2001
From: Sebastien Tardif <SebTardif@ncf.ca>
Date: Fri, 11 Sep 2026 18:21:19 -0700
Subject: [PATCH] [GHSA-jf6q-chmf-3h3v] Add weasyprint 70.0 url_fetcher fix
 commit

Add the missing primary-source reference on the existing reviewed advisory.
---
 .../2026/09/GHSA-jf6q-chmf-3h3v/GHSA-jf6q-chmf-3h3v.json    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/09/GHSA-jf6q-chmf-3h3v/GHSA-jf6q-chmf-3h3v.json b/advisories/github-reviewed/2026/09/GHSA-jf6q-chmf-3h3v/GHSA-jf6q-chmf-3h3v.json
index 407668d60dc8..e46077033683 100644
--- a/advisories/github-reviewed/2026/09/GHSA-jf6q-chmf-3h3v/GHSA-jf6q-chmf-3h3v.json
+++ b/advisories/github-reviewed/2026/09/GHSA-jf6q-chmf-3h3v/GHSA-jf6q-chmf-3h3v.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jf6q-chmf-3h3v",
-  "modified": "2026-09-09T18:06:38Z",
+  "modified": "2026-09-12T01:18:13Z",
   "published": "2026-09-09T18:06:38Z",
   "aliases": [
     "CVE-2026-55073"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-jf6q-chmf-3h3v"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Kozea/WeasyPrint/commit/289e278439b017cd9263b4cd4727026987f86443"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/Kozea/WeasyPrint"