Publish Advisories

GHSA-r3vr-prwv-86g9
GHSA-34wj-p5jm-2p96

advisories/github-reviewed/2018/11/GHSA-r3vr-prwv-86g9/GHSA-r3vr-prwv-86g9.json

@@ -1,15 +1,22 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-r3vr-prwv-86g9",
-  "modified": "2021-09-17T14:15:08Z",
+  "modified": "2024-10-25T21:18:50Z",
   "published": "2018-11-06T23:14:39Z",
   "aliases": [
     "CVE-2014-1927"
   ],
-  "summary": "High severity vulnerability that affects python-gnupg",
+  "summary": "python-gnupg's shell_quote function does not properly quote strings",
   "details": "The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using \"$(\" command-substitution sequences, a different vulnerability than CVE-2014-1928.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -56,6 +63,10 @@
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-r3vr-prwv-86g9"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-90.yaml"
+    },
     {
       "type": "WEB",
       "url": "http://seclists.org/oss-sec/2014/q1/245"
@@ -64,14 +75,6 @@
       "type": "WEB",
       "url": "http://seclists.org/oss-sec/2014/q1/294"
     },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/56616"
-    },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/59031"
-    },
     {
       "type": "WEB",
       "url": "http://www.debian.org/security/2014/dsa-2946"

advisories/github-reviewed/2022/05/GHSA-34wj-p5jm-2p96/GHSA-34wj-p5jm-2p96.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-34wj-p5jm-2p96",
-  "modified": "2022-07-06T19:44:36Z",
+  "modified": "2024-10-25T21:18:53Z",
   "published": "2022-05-13T01:06:10Z",
   "aliases": [
     "CVE-2016-5851"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -47,6 +51,10 @@
       "type": "WEB",
       "url": "https://github.com/python-openxml/python-docx/commit/61b40b161b64173ab8e362aec1fd197948431beb"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-34wj-p5jm-2p96"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-docx/PYSEC-2016-21.yaml"
@@ -86,6 +94,10 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2016/06/28/8"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/bid/91485"
     }
   ],
   "database_specific": {