diff --git a/advisories/github-reviewed/2024/03/GHSA-26w3-q4j8-4xjp/GHSA-26w3-q4j8-4xjp.json b/advisories/github-reviewed/2024/03/GHSA-26w3-q4j8-4xjp/GHSA-26w3-q4j8-4xjp.json index 8716f4a705a..691256bd370 100644 --- a/advisories/github-reviewed/2024/03/GHSA-26w3-q4j8-4xjp/GHSA-26w3-q4j8-4xjp.json +++ b/advisories/github-reviewed/2024/03/GHSA-26w3-q4j8-4xjp/GHSA-26w3-q4j8-4xjp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-26w3-q4j8-4xjp", - "modified": "2024-03-06T21:35:26Z", + "modified": "2024-03-14T21:44:29Z", "published": "2024-03-06T15:29:11Z", "aliases": [ "CVE-2024-27288" @@ -47,6 +47,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27288" }, + { + "type": "WEB", + "url": "https://github.com/1Panel-dev/1Panel/pull/4014" + }, { "type": "PACKAGE", "url": "https://github.com/1Panel-dev/1Panel" diff --git a/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json b/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json index b050a060c68..0d553d99118 100644 --- a/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json +++ b/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7jwh-3vrq-q3m8", - "modified": "2024-03-04T20:45:25Z", + "modified": "2024-03-14T21:46:07Z", "published": "2024-03-04T20:45:25Z", "aliases": [ @@ -30,6 +30,63 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/jackc/pgproto3/v2" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/jackc/pgx/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.18.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/jackc/pgx/v5" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "5.0.0" + }, + { + "fixed": "5.5.4" + } + ] + } + ] } ], "references": [ @@ -37,6 +94,10 @@ "type": "WEB", "url": "https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8" }, + { + "type": "WEB", + "url": "https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv" + }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27304" @@ -45,6 +106,18 @@ "type": "WEB", "url": "https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007" }, + { + "type": "WEB", + "url": "https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4" + }, + { + "type": "WEB", + "url": "https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8" + }, + { + "type": "WEB", + "url": "https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df" + }, { "type": "PACKAGE", "url": "https://github.com/jackc/pgproto3" diff --git a/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json b/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json index ef4506d7d51..cba66b21901 100644 --- a/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json +++ b/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mrww-27vc-gghv", - "modified": "2024-03-04T20:43:24Z", + "modified": "2024-03-14T21:45:18Z", "published": "2024-03-04T20:43:24Z", "aliases": [ "CVE-2024-27304" @@ -68,6 +68,63 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/jackc/pgproto3/v2" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/jackc/pgx/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.18.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/jackc/pgx/v5" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "5.0.0" + }, + { + "fixed": "5.5.4" + } + ] + } + ] } ], "references": [ @@ -108,6 +165,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-03-04T20:43:24Z", - "nvd_published_at": null + "nvd_published_at": "2024-03-06T19:15:08Z" } } \ No newline at end of file