)]}'
{
  "commit": "28d255972ecfef72d38f9fca0579fab5c8a6ada9",
  "tree": "b7f76b704d0e044fd2cd66935db8bebe366b4e3f",
  "parents": [
    "bd05eea5912f655a7ac22b9e9197a58b6164acf8"
  ],
  "author": {
    "name": "Damien Neil",
    "email": "dneil@google.com",
    "time": "Wed May 20 14:47:44 2026 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Tue Jun 02 17:19:57 2026 -0700"
  },
  "message": "webp: avoid canvas overflow on 32-bit systems\n\nRFC 9649 permits canvases with a width*height of up to 2^32-1.\nEnforce a slightly smaller limit of 2^31-1 to avoid overflow\non 32-bit platforms.\n\nThis corrects the fix in CL 759860 to cover 32-bit platforms as well.\n\nFor golang/go#78407\nFor CVE-2026-33813\n\nChange-Id: Ib380c95234b59ed0074d00d0a18de9686a6a6964\nReviewed-on: https://go-review.googlesource.com/c/image/+/780860\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nAuto-Submit: Damien Neil \u003cdneil@google.com\u003e\nReviewed-by: Nicholas Husin \u003cnsh@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "15dc0ee55613db2c045bcb04204eec66e8f1cb3a",
      "old_mode": 33188,
      "old_path": "webp/decode.go",
      "new_id": "726bebded9f03dc9d4dfeb0db2e335dd3c9028bd",
      "new_mode": 33188,
      "new_path": "webp/decode.go"
    },
    {
      "type": "modify",
      "old_id": "56948ef7fafa6642327c5ab9f0199dfc5fae9fcf",
      "old_mode": 33188,
      "old_path": "webp/decode_test.go",
      "new_id": "796a8bc66c9b2faa9d9749dd3408fafe3aa6a220",
      "new_mode": 33188,
      "new_path": "webp/decode_test.go"
    }
  ]
}