Publish Advisories

GHSA-264p-99wq-f4j6
GHSA-fqh6-6h6c-366m

advisories/github-reviewed/2024/01/GHSA-264p-99wq-f4j6/GHSA-264p-99wq-f4j6.json

@@ -0,0 +1,57 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-264p-99wq-f4j6",
+  "modified": "2024-01-03T22:04:08Z",
+  "published": "2024-01-03T22:04:08Z",
+  "aliases": [
+    "CVE-2024-21634"
+  ],
+  "summary": "Ion Java StackOverflow vulnerability",
+  "details": "### Impact\n\nA potential denial-of-service issue exists in `ion-java` for applications that use `ion-java` to:\n\n* Deserialize Ion text encoded data, or\n* Deserialize Ion text or binary encoded data into the `IonValue` model and then invoke certain `IonValue` methods on that in-memory representation.\n\nAn actor could craft Ion data that, when loaded by the affected application and/or processed using the `IonValue` model, results in a `StackOverflowError` originating from the `ion-java` library.\n\nImpacted versions: <1.10.5\n\n### Patches\n\nThe patch is included in `ion-java` >= 1.10.5.\n\n### Workarounds\n\nDo not load data which originated from an untrusted source or that could have been tampered with. **Only load data you trust.**\n\n----\n\nIf you have any questions or comments about this advisory, we ask that you contact AWS/Amazon Security via our vulnerability reporting page [1] or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n[1] https://aws.amazon.com/security/vulnerability-reporting",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "com.amazon.ion:ion-java"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.10.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/amazon-ion/ion-java"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-03T22:04:08Z",
+    "nvd_published_at": null
+  }
+}

advisories/github-reviewed/2024/01/GHSA-fqh6-6h6c-366m/GHSA-fqh6-6h6c-366m.json

@@ -1,17 +1,39 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fqh6-6h6c-366m",
-  "modified": "2024-01-03T15:30:26Z",
+  "modified": "2024-01-03T22:03:52Z",
   "published": "2024-01-03T15:30:26Z",
   "aliases": [
     "CVE-2023-39655"
   ],
+  "summary": "CouchAuth host header injection vulnerability leaks the password reset token",
   "details": "A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgot password request, it is possible to send password reset links to users which, once clicked, lead to an attacker-controlled server and thus leak the password reset token. This may allow an attacker to reset other users' passwords and take over their accounts.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
+    }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@perfood/couch-auth"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.20.0"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -23,17 +45,17 @@
       "url": "https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-39655"
     },
     {
-      "type": "WEB",
-      "url": "https://www.npmjs.com/package/%40perfood/couch-auth"
+      "type": "PACKAGE",
+      "url": "https://github.com/perfood/couch-auth"
     }
   ],
   "database_specific": {
     "cwe_ids": [
 
     ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-03T22:03:52Z",
     "nvd_published_at": "2024-01-03T13:15:08Z"
   }
 }