diff --git a/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json b/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json
index d2d8d8e151ce..e38482e9af5a 100644
--- a/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json
+++ b/advisories/github-reviewed/2026/07/GHSA-crf3-v9rr-v7hj/GHSA-crf3-v9rr-v7hj.json
@@ -47,6 +47,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/alibaba/fastjson2/wiki/Security-Advisory:-Remote-Code-Execution-in-fastjson-1.2.68%E2%80%931.2.83"
+    },
+    {
+      "type": "WEB",
+      "url": "https://zerohunt.ai/blog/fastjson-cve-2026-16723-gadget-free-rce"
     }
   ],
   "database_specific": {