diff --git a/advisories/github-reviewed/2019/01/GHSA-2f9x-5v75-3qv4/GHSA-2f9x-5v75-3qv4.json b/advisories/github-reviewed/2019/01/GHSA-2f9x-5v75-3qv4/GHSA-2f9x-5v75-3qv4.json index 27684e54e57..0aeaac6f5c2 100644 --- a/advisories/github-reviewed/2019/01/GHSA-2f9x-5v75-3qv4/GHSA-2f9x-5v75-3qv4.json +++ b/advisories/github-reviewed/2019/01/GHSA-2f9x-5v75-3qv4/GHSA-2f9x-5v75-3qv4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2f9x-5v75-3qv4", - "modified": "2024-03-07T22:57:21Z", + "modified": "2024-09-17T15:09:40Z", "published": "2019-01-04T17:50:00Z", "aliases": [ "CVE-2018-7537" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { @@ -37,7 +41,7 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { @@ -56,7 +60,7 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { @@ -106,6 +110,10 @@ "type": "PACKAGE", "url": "https://github.com/django/django" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2018-6.yaml" + }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html" @@ -121,10 +129,6 @@ { "type": "WEB", "url": "https://www.djangoproject.com/weblog/2018/mar/06/security-releases" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/103357" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/05/GHSA-pgxh-wfw4-jx2v/GHSA-pgxh-wfw4-jx2v.json b/advisories/github-reviewed/2022/05/GHSA-pgxh-wfw4-jx2v/GHSA-pgxh-wfw4-jx2v.json index 8a69aab0f38..6d9e1f1ef47 100644 --- a/advisories/github-reviewed/2022/05/GHSA-pgxh-wfw4-jx2v/GHSA-pgxh-wfw4-jx2v.json +++ b/advisories/github-reviewed/2022/05/GHSA-pgxh-wfw4-jx2v/GHSA-pgxh-wfw4-jx2v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pgxh-wfw4-jx2v", - "modified": "2024-05-08T17:38:27Z", + "modified": "2024-09-17T15:08:38Z", "published": "2022-05-17T00:36:02Z", "aliases": [ "CVE-2015-5963" @@ -9,13 +9,20 @@ "summary": "Django denial of service via empty session record creation", "details": "`contrib.sessions.middleware.SessionMiddleware` in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a large number of requests to `contrib.auth.views.logout`, which triggers the creation of an empty session record.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ecosystem_specific": { "affected_functions": [ @@ -27,7 +34,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.8.0" + "introduced": "1.8" }, { "fixed": "1.8.4" @@ -39,7 +46,7 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ecosystem_specific": { "affected_functions": [ @@ -51,7 +58,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.7.0" + "introduced": "1.7" }, { "fixed": "1.7.10" @@ -63,7 +70,7 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ecosystem_specific": { "affected_functions": [ @@ -75,7 +82,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.4.0" + "introduced": "1.4" }, { "fixed": "1.4.22" @@ -118,6 +125,10 @@ "type": "WEB", "url": "https://github.com/django/django/blob/4555a823fd57e261e1b19c778429473256c8ea08/docs/releases/1.8.4.txt#L9-L21" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-22.yaml" + }, { "type": "WEB", "url": "https://web.archive.org/web/20150904151934/http://www.securitytracker.com/id/1033318" @@ -169,7 +180,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-770" ], "severity": "MODERATE", "github_reviewed": true,