That's "H.Merijn Brand - Tux" <linux@tux.freedom.nl> who has reported, right?

I guess so. Then I suppose I should add credits?

security/vuxml: add textproc/p5-Text-CSV_XS

Reported by: H.Merijn Brand - Tux <linux@tux.freedom.nl>
Security: CVE-2026-7111

Follow that, would you mind to update the patch with some like this:

- <p>https://github.com/cpan-authors/Text-CSV_XS/commit/c17f31a5f2bf36674748eb4b6e25672f0571a224.patch reports:</p>
+ <p>H.Merijn Brand - Tux" <linux@tux.freedom.nl> reports:</p>

My understanding is that wasn't a patch who's reported about the issue, but a human.

Follow that, would you mind to update the patch with some like this.

Okay.

My understanding is that wasn't a patch who's reported about the issue, but a human.

Yes. 😁

The issue is not related to FreeBSD directly, that needs to be fixed.

but there is a freebsd security advisory published for libnv?

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:17.libnv.asc

Sorry, that's my mistake. That's the separate issue :-)