Publish Advisories

GHSA-2q2f-h83x-cx3x
GHSA-g3q2-vcjq-rgrc
GHSA-qv6x-53jj-vw59

advisories/github-reviewed/2024/05/GHSA-2q2f-h83x-cx3x/GHSA-2q2f-h83x-cx3x.json

@@ -51,6 +51,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-269",
       "CWE-613"
     ],
     "severity": "MODERATE",

advisories/github-reviewed/2024/05/GHSA-g3q2-vcjq-rgrc/GHSA-g3q2-vcjq-rgrc.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g3q2-vcjq-rgrc",
-  "modified": "2024-05-20T20:54:10Z",
+  "modified": "2024-07-05T20:59:11Z",
   "published": "2024-05-20T18:31:22Z",
   "aliases": [
     "CVE-2024-24294"
@@ -9,7 +9,10 @@
   "summary": "Blackprint @blackprint/engine Prototype Pollution issue",
   "details": "A Prototype Pollution issue in Blackprint @blackprint/engine 0.8.12 through 0.9.1 allows an attacker to execute arbitrary code via the `_utils.setDeepProperty` function of `engine.min.js`.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -52,9 +55,10 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1321"
+      "CWE-1321",
+      "CWE-94"
     ],
-    "severity": "MODERATE",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2024-05-20T20:54:10Z",
     "nvd_published_at": "2024-05-20T17:15:09Z"

advisories/github-reviewed/2024/05/GHSA-qv6x-53jj-vw59/GHSA-qv6x-53jj-vw59.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qv6x-53jj-vw59",
-  "modified": "2024-05-22T19:28:58Z",
+  "modified": "2024-07-05T20:59:53Z",
   "published": "2024-05-21T21:30:27Z",
   "aliases": [
     "CVE-2024-35061"
@@ -11,7 +11,7 @@
   "severity": [
     {
       "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
     }
   ],
   "affected": [