Publish Advisories

GHSA-j66q-qmrc-89rx
GHSA-jxfp-4rvq-9h9m

advisories/github-reviewed/2022/05/GHSA-j66q-qmrc-89rx/GHSA-j66q-qmrc-89rx.json

@@ -1,17 +1,41 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j66q-qmrc-89rx",
-  "modified": "2022-05-24T17:36:44Z",
+  "modified": "2024-02-01T20:58:40Z",
   "published": "2022-05-24T17:36:44Z",
   "aliases": [
     "CVE-2020-22083"
   ],
-  "details": "jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function.",
+  "summary": "jsonpickle unsafe deserialization",
+  "details": "jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the `decode()` function. This CVE is disputed by the project author as intended functionality.",
   "severity": [
 
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "jsonpickle"
+      },
+      "ecosystem_specific": {
+        "affected_functions": [
+          "jsonpickle.decode"
+        ]
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "1.4.2"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -26,6 +50,10 @@
       "type": "WEB",
       "url": "https://github.com/jsonpickle/jsonpickle/issues/332#issuecomment-747807494"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jsonpickle/jsonpickle/issues/335"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2020-22083"
@@ -38,6 +66,10 @@
       "type": "WEB",
       "url": "https://github.com/j0lt-github/python-deserialization-attack-payload-generator"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/jsonpickle/jsonpickle"
+    },
     {
       "type": "WEB",
       "url": "https://versprite.com/blog/application-security/into-the-jar-jsonpickle-exploitation/"
@@ -48,8 +80,8 @@
       "CWE-502"
     ],
     "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-02-01T20:58:40Z",
     "nvd_published_at": "2020-12-17T16:15:00Z"
   }
 }

advisories/github-reviewed/2022/05/GHSA-jxfp-4rvq-9h9m/GHSA-jxfp-4rvq-9h9m.json

@@ -1,12 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jxfp-4rvq-9h9m",
-  "modified": "2022-11-25T21:30:26Z",
+  "modified": "2024-02-01T20:59:15Z",
   "published": "2022-05-24T17:34:40Z",
   "aliases": [
     "CVE-2020-28975"
   ],
-  "details": "svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array.",
+  "summary": "scikit-learn Denial of Service",
+  "details": "svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array.\nNOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "scikit-learn"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0.23.2"
+            },
+            {
+              "fixed": "1.0.1"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -33,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/scikit-learn/scikit-learn"
+    },
     {
       "type": "WEB",
       "url": "https://security.gentoo.org/glsa/202301-03"
@@ -51,8 +74,8 @@
 
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-02-01T20:59:15Z",
     "nvd_published_at": "2020-11-21T21:15:00Z"
   }
 }