From 2465dd1ec319715d9b70a87cc847694afa009851 Mon Sep 17 00:00:00 2001
From: Alec <32501055+Alechilles@users.noreply.github.com>
Date: Fri, 21 Aug 2026 20:44:42 -0400
Subject: [PATCH] Improve GHSA-5g29-3f8w-5892

---
 .../GHSA-5g29-3f8w-5892.json                  | 27 ++++++++++++++++---
 1 file changed, 24 insertions(+), 3 deletions(-)

diff --git a/advisories/unreviewed/2025/07/GHSA-5g29-3f8w-5892/GHSA-5g29-3f8w-5892.json b/advisories/unreviewed/2025/07/GHSA-5g29-3f8w-5892/GHSA-5g29-3f8w-5892.json
index cdaaa4f6c7d4..7a5534e02dd6 100644
--- a/advisories/unreviewed/2025/07/GHSA-5g29-3f8w-5892/GHSA-5g29-3f8w-5892.json
+++ b/advisories/unreviewed/2025/07/GHSA-5g29-3f8w-5892/GHSA-5g29-3f8w-5892.json
@@ -1,19 +1,40 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5g29-3f8w-5892",
-  "modified": "2025-07-07T15:30:41Z",
+  "modified": "2025-07-07T15:30:47Z",
   "published": "2025-07-07T15:30:41Z",
   "aliases": [
     "CVE-2025-6810"
   ],
-  "details": "Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mescius ActiveReports.NET. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the implementation of the ReadValue method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25246.",
+  "summary": "MESCIUS ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability",
+  "details": "This issue is fixed in ActiveReports.NET v20. Users should upgrade to ActiveReports.NET v20.0.1 or later.\n\nMESCIUS ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MESCIUS ActiveReports.NET. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the implementation of the ReadValue method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25246.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "NuGet",
+        "name": ""
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "18.1.1"
+            },
+            {
+              "fixed": "20.0.1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",