Publish Advisories

GHSA-869c-j7wc-8jqv
GHSA-9phm-fm57-rhg8
GHSA-hq4f-mv3q-8wcv
GHSA-f6f8-9mx6-9mx2
GHSA-vjpv-x8p9-7p85

advisories/github-reviewed/2024/06/GHSA-869c-j7wc-8jqv/GHSA-869c-j7wc-8jqv.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-869c-j7wc-8jqv",
-  "modified": "2024-07-05T21:27:41Z",
+  "modified": "2024-08-02T15:51:36Z",
   "published": "2024-06-29T06:31:40Z",
   "aliases": [
     "CVE-2019-25211"
@@ -9,7 +9,14 @@
   "summary": "Gin mishandles a wildcard at the end of an origin string",
   "details": "parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is that only https://example.com/* should be allowed, and http://localhost.example.com/* is allowed when the intention is that only http://localhost/* should be allowed.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -68,10 +75,6 @@
       "type": "WEB",
       "url": "https://github.com/gin-contrib/cors/commit/27b723a473efd80d5a498fa9f5933c80204c850d"
     },
-    {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-869c-j7wc-8jqv"
-    },
     {
       "type": "WEB",
       "url": "https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0"
@@ -89,7 +92,7 @@
     "cwe_ids": [
 
     ],
-    "severity": "MODERATE",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2024-07-01T21:30:24Z",
     "nvd_published_at": "2024-06-29T00:15:02Z"

advisories/github-reviewed/2024/06/GHSA-9phm-fm57-rhg8/GHSA-9phm-fm57-rhg8.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9phm-fm57-rhg8",
-  "modified": "2024-06-27T18:53:39Z",
+  "modified": "2024-08-02T15:50:53Z",
   "published": "2024-06-26T19:26:38Z",
   "aliases": [
     "CVE-2024-24792"
@@ -9,7 +9,14 @@
   "summary": "Panic when parsing invalid palette-color images in golang.org/x/image",
   "details": "Parsing a corrupt or malicious image with invalid color indices can cause a panic.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -58,7 +65,7 @@
     "cwe_ids": [
       "CWE-248"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-06-26T19:26:38Z",
     "nvd_published_at": "2024-06-27T18:15:13Z"

advisories/github-reviewed/2024/06/GHSA-hq4f-mv3q-8wcv/GHSA-hq4f-mv3q-8wcv.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hq4f-mv3q-8wcv",
-  "modified": "2024-07-19T21:44:47Z",
+  "modified": "2024-08-02T15:50:19Z",
   "published": "2024-06-25T21:31:17Z",
   "aliases": [
     "CVE-2024-37843"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [

advisories/github-reviewed/2024/07/GHSA-f6f8-9mx6-9mx2/GHSA-f6f8-9mx6-9mx2.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f6f8-9mx6-9mx2",
-  "modified": "2024-07-10T21:43:25Z",
+  "modified": "2024-08-02T15:52:17Z",
   "published": "2024-07-10T06:33:52Z",
   "aliases": [
     "CVE-2024-39614"
@@ -94,6 +94,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-130",
       "CWE-770"
     ],
     "severity": "HIGH",

advisories/github-reviewed/2024/07/GHSA-vjpv-x8p9-7p85/GHSA-vjpv-x8p9-7p85.json

@@ -63,6 +63,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-241",
       "CWE-400"
     ],
     "severity": "HIGH",