From 05c68e5bd473247a56593adcec11a2ac02b40567 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 5 Jul 2024 21:01:25 +0000 Subject: [PATCH] Publish Advisories GHSA-2q2f-h83x-cx3x GHSA-g3q2-vcjq-rgrc GHSA-qv6x-53jj-vw59 --- .../05/GHSA-2q2f-h83x-cx3x/GHSA-2q2f-h83x-cx3x.json | 1 + .../05/GHSA-g3q2-vcjq-rgrc/GHSA-g3q2-vcjq-rgrc.json | 12 ++++++++---- .../05/GHSA-qv6x-53jj-vw59/GHSA-qv6x-53jj-vw59.json | 4 ++-- 3 files changed, 11 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2024/05/GHSA-2q2f-h83x-cx3x/GHSA-2q2f-h83x-cx3x.json b/advisories/github-reviewed/2024/05/GHSA-2q2f-h83x-cx3x/GHSA-2q2f-h83x-cx3x.json index ebcede49059..fb6a0737685 100644 --- a/advisories/github-reviewed/2024/05/GHSA-2q2f-h83x-cx3x/GHSA-2q2f-h83x-cx3x.json +++ b/advisories/github-reviewed/2024/05/GHSA-2q2f-h83x-cx3x/GHSA-2q2f-h83x-cx3x.json @@ -51,6 +51,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-269", "CWE-613" ], "severity": "MODERATE", diff --git a/advisories/github-reviewed/2024/05/GHSA-g3q2-vcjq-rgrc/GHSA-g3q2-vcjq-rgrc.json b/advisories/github-reviewed/2024/05/GHSA-g3q2-vcjq-rgrc/GHSA-g3q2-vcjq-rgrc.json index 67a6f87ba38..c527e65462b 100644 --- a/advisories/github-reviewed/2024/05/GHSA-g3q2-vcjq-rgrc/GHSA-g3q2-vcjq-rgrc.json +++ b/advisories/github-reviewed/2024/05/GHSA-g3q2-vcjq-rgrc/GHSA-g3q2-vcjq-rgrc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-g3q2-vcjq-rgrc", - "modified": "2024-05-20T20:54:10Z", + "modified": "2024-07-05T20:59:11Z", "published": "2024-05-20T18:31:22Z", "aliases": [ "CVE-2024-24294" @@ -9,7 +9,10 @@ "summary": "Blackprint @blackprint/engine Prototype Pollution issue", "details": "A Prototype Pollution issue in Blackprint @blackprint/engine 0.8.12 through 0.9.1 allows an attacker to execute arbitrary code via the `_utils.setDeepProperty` function of `engine.min.js`.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -52,9 +55,10 @@ ], "database_specific": { "cwe_ids": [ - "CWE-1321" + "CWE-1321", + "CWE-94" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-05-20T20:54:10Z", "nvd_published_at": "2024-05-20T17:15:09Z" diff --git a/advisories/github-reviewed/2024/05/GHSA-qv6x-53jj-vw59/GHSA-qv6x-53jj-vw59.json b/advisories/github-reviewed/2024/05/GHSA-qv6x-53jj-vw59/GHSA-qv6x-53jj-vw59.json index 3ef7bce36e1..51a2b252f30 100644 --- a/advisories/github-reviewed/2024/05/GHSA-qv6x-53jj-vw59/GHSA-qv6x-53jj-vw59.json +++ b/advisories/github-reviewed/2024/05/GHSA-qv6x-53jj-vw59/GHSA-qv6x-53jj-vw59.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qv6x-53jj-vw59", - "modified": "2024-05-22T19:28:58Z", + "modified": "2024-07-05T20:59:53Z", "published": "2024-05-21T21:30:27Z", "aliases": [ "CVE-2024-35061" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "affected": [