diff --git a/advisories/github-reviewed/2026/07/GHSA-5cjr-mxj5-wmrx/GHSA-5cjr-mxj5-wmrx.json b/advisories/github-reviewed/2026/07/GHSA-5cjr-mxj5-wmrx/GHSA-5cjr-mxj5-wmrx.json
index 234fb663d860..2cd2cf7f336c 100644
--- a/advisories/github-reviewed/2026/07/GHSA-5cjr-mxj5-wmrx/GHSA-5cjr-mxj5-wmrx.json
+++ b/advisories/github-reviewed/2026/07/GHSA-5cjr-mxj5-wmrx/GHSA-5cjr-mxj5-wmrx.json
@@ -58,6 +58,50 @@
       "database_specific": {
         "last_known_affected_version_range": "<= 4.20.2"
       }
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "simplesamlphp/saml2"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "4.19.3"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 4.19.2"
+      }
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "simplesamlphp/saml2-legacy"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "4.19.3"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 4.19.2"
+      }
     }
   ],
   "references": [