From 5bebcb04d0ff728a41ab9ece68c4d6c9b999327a Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 14:52:56 -0400
Subject: [PATCH] Add Gitea archive token-scope fix references

---
 .../GHSA-cr4g-f395-h25h.json                  | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-cr4g-f395-h25h/GHSA-cr4g-f395-h25h.json b/advisories/github-reviewed/2026/06/GHSA-cr4g-f395-h25h/GHSA-cr4g-f395-h25h.json
index 4bf3a208d89d4..a50e758dd3650 100644
--- a/advisories/github-reviewed/2026/06/GHSA-cr4g-f395-h25h/GHSA-cr4g-f395-h25h.json
+++ b/advisories/github-reviewed/2026/06/GHSA-cr4g-f395-h25h/GHSA-cr4g-f395-h25h.json
@@ -43,6 +43,26 @@
       "type": "WEB",
       "url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-cr4g-f395-h25h"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/pull/37735"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/pull/37757"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/commit/9c0ad8291b43cdc3aff32609ad14766635a458a2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://blog.gitea.com/release-of-1.26.2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/releases/tag/v1.26.2"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/go-gitea/gitea"