diff --git a/advisories/github-reviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json b/advisories/github-reviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json
new file mode 100644
index 00000000000..aad7f848cfc
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json
@@ -0,0 +1,126 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-87x7-pwrx-jch7",
+  "modified": "2025-05-28T20:03:14Z",
+  "published": "2022-05-24T19:02:32Z",
+  "aliases": [
+    "CVE-2021-29040"
+  ],
+  "summary": "Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages",
+  "details": "The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused attacks via crafted inputs.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.portal.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.3.5"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.0.10.fp97"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.1.0"
+            },
+            {
+              "fixed": "7.1.10.fp20"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.2.0"
+            },
+            {
+              "fixed": "7.2.10.fp10"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29040"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/liferay/liferay-portal"
+    },
+    {
+      "type": "WEB",
+      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743429"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20220828222656/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743429"
+    },
+    {
+      "type": "WEB",
+      "url": "http://liferay.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-209"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-05-28T20:03:14Z",
+    "nvd_published_at": "2021-05-16T16:15:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2022/05/GHSA-mg3r-9jh8-33r9/GHSA-mg3r-9jh8-33r9.json b/advisories/github-reviewed/2022/05/GHSA-mg3r-9jh8-33r9/GHSA-mg3r-9jh8-33r9.json
new file mode 100644
index 00000000000..d23b0e2bb86
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-mg3r-9jh8-33r9/GHSA-mg3r-9jh8-33r9.json
@@ -0,0 +1,122 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mg3r-9jh8-33r9",
+  "modified": "2025-05-28T20:01:36Z",
+  "published": "2022-05-24T17:23:59Z",
+  "aliases": [
+    "CVE-2020-15842"
+  ],
+  "summary": "Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability",
+  "details": "Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.portal.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.3.0"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.0.0"
+            },
+            {
+              "fixed": "7.0.10.fp90"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.1.0"
+            },
+            {
+              "fixed": "7.1.10.fp17"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.2.0"
+            },
+            {
+              "fixed": "7.2.10.fp5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15842"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/liferay/liferay-portal"
+    },
+    {
+      "type": "WEB",
+      "url": "https://issues.liferay.com/browse/LPE-16963"
+    },
+    {
+      "type": "WEB",
+      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317427"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-05-28T20:01:36Z",
+    "nvd_published_at": "2020-07-20T02:15:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2022/05/GHSA-vrwx-q9pj-x488/GHSA-vrwx-q9pj-x488.json b/advisories/github-reviewed/2022/05/GHSA-vrwx-q9pj-x488/GHSA-vrwx-q9pj-x488.json
new file mode 100644
index 00000000000..1f938ad70ae
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-vrwx-q9pj-x488/GHSA-vrwx-q9pj-x488.json
@@ -0,0 +1,168 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vrwx-q9pj-x488",
+  "modified": "2025-05-28T20:02:42Z",
+  "published": "2022-05-24T17:29:22Z",
+  "aliases": [
+    "CVE-2020-15840"
+  ],
+  "summary": "Liferay Portal and Liferay DXP Bypass via Double Encoded URL",
+  "details": "In Liferay Portal before 7.3.1, com.liferay.portal:com.liferay.portal.impl before 7.1.3 and 7.4.0, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:com.liferay.portal.impl"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.2.0"
+            },
+            {
+              "fixed": "7.4.0"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.0.10.fp93"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.1.0"
+            },
+            {
+              "fixed": "7.1.10.fp19"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.dxp.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.2.0"
+            },
+            {
+              "fixed": "7.2.10.fp7"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:release.portal.bom"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.3.1"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.liferay.portal:com.liferay.portal.impl"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.1.3"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15840"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/liferay/liferay-portal"
+    },
+    {
+      "type": "WEB",
+      "url": "https://issues.liferay.com/browse/LPE-17046"
+    },
+    {
+      "type": "WEB",
+      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities"
+    },
+    {
+      "type": "WEB",
+      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119772204"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.snyk.io/vuln/SNYK-JAVA-COMLIFERAYPORTAL-1296538"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-05-28T20:02:42Z",
+    "nvd_published_at": "2020-09-24T15:15:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json b/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json
deleted file mode 100644
index 644becc6a66..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-87x7-pwrx-jch7",
-  "modified": "2022-05-24T19:02:32Z",
-  "published": "2022-05-24T19:02:32Z",
-  "aliases": [
-    "CVE-2021-29040"
-  ],
-  "details": "The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused attacks via crafted inputs.",
-  "severity": [],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29040"
-    },
-    {
-      "type": "WEB",
-      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743429"
-    },
-    {
-      "type": "WEB",
-      "url": "http://liferay.com"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-209"
-    ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2021-05-16T16:15:00Z"
-  }
-}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-mg3r-9jh8-33r9/GHSA-mg3r-9jh8-33r9.json b/advisories/unreviewed/2022/05/GHSA-mg3r-9jh8-33r9/GHSA-mg3r-9jh8-33r9.json
deleted file mode 100644
index 3d4fde1625b..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-mg3r-9jh8-33r9/GHSA-mg3r-9jh8-33r9.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-mg3r-9jh8-33r9",
-  "modified": "2022-05-24T17:23:59Z",
-  "published": "2022-05-24T17:23:59Z",
-  "aliases": [
-    "CVE-2020-15842"
-  ],
-  "details": "Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.",
-  "severity": [],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15842"
-    },
-    {
-      "type": "WEB",
-      "url": "https://issues.liferay.com/browse/LPE-16963"
-    },
-    {
-      "type": "WEB",
-      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317427"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2020-07-20T02:15:00Z"
-  }
-}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-vrwx-q9pj-x488/GHSA-vrwx-q9pj-x488.json b/advisories/unreviewed/2022/05/GHSA-vrwx-q9pj-x488/GHSA-vrwx-q9pj-x488.json
deleted file mode 100644
index 58e512cce38..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-vrwx-q9pj-x488/GHSA-vrwx-q9pj-x488.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-vrwx-q9pj-x488",
-  "modified": "2022-05-24T17:29:22Z",
-  "published": "2022-05-24T17:29:22Z",
-  "aliases": [
-    "CVE-2020-15840"
-  ],
-  "details": "In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.",
-  "severity": [],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15840"
-    },
-    {
-      "type": "WEB",
-      "url": "https://issues.liferay.com/browse/LPE-17046"
-    },
-    {
-      "type": "WEB",
-      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities"
-    },
-    {
-      "type": "WEB",
-      "url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119772204"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2020-09-24T15:15:00Z"
-  }
-}
\ No newline at end of file