diff --git a/advisories/github-reviewed/2024/06/GHSA-869c-j7wc-8jqv/GHSA-869c-j7wc-8jqv.json b/advisories/github-reviewed/2024/06/GHSA-869c-j7wc-8jqv/GHSA-869c-j7wc-8jqv.json index cc4cbfe1d50..f8e0c80ae52 100644 --- a/advisories/github-reviewed/2024/06/GHSA-869c-j7wc-8jqv/GHSA-869c-j7wc-8jqv.json +++ b/advisories/github-reviewed/2024/06/GHSA-869c-j7wc-8jqv/GHSA-869c-j7wc-8jqv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-869c-j7wc-8jqv", - "modified": "2024-07-05T21:27:41Z", + "modified": "2024-08-02T15:51:36Z", "published": "2024-06-29T06:31:40Z", "aliases": [ "CVE-2019-25211" @@ -9,7 +9,14 @@ "summary": "Gin mishandles a wildcard at the end of an origin string", "details": "parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is that only https://example.com/* should be allowed, and http://localhost.example.com/* is allowed when the intention is that only http://localhost/* should be allowed.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -68,10 +75,6 @@ "type": "WEB", "url": "https://github.com/gin-contrib/cors/commit/27b723a473efd80d5a498fa9f5933c80204c850d" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-869c-j7wc-8jqv" - }, { "type": "WEB", "url": "https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0" @@ -89,7 +92,7 @@ "cwe_ids": [ ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-07-01T21:30:24Z", "nvd_published_at": "2024-06-29T00:15:02Z" diff --git a/advisories/github-reviewed/2024/06/GHSA-9phm-fm57-rhg8/GHSA-9phm-fm57-rhg8.json b/advisories/github-reviewed/2024/06/GHSA-9phm-fm57-rhg8/GHSA-9phm-fm57-rhg8.json index 37c88dd6ab2..4cbbcdafecc 100644 --- a/advisories/github-reviewed/2024/06/GHSA-9phm-fm57-rhg8/GHSA-9phm-fm57-rhg8.json +++ b/advisories/github-reviewed/2024/06/GHSA-9phm-fm57-rhg8/GHSA-9phm-fm57-rhg8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9phm-fm57-rhg8", - "modified": "2024-06-27T18:53:39Z", + "modified": "2024-08-02T15:50:53Z", "published": "2024-06-26T19:26:38Z", "aliases": [ "CVE-2024-24792" @@ -9,7 +9,14 @@ "summary": "Panic when parsing invalid palette-color images in golang.org/x/image", "details": "Parsing a corrupt or malicious image with invalid color indices can cause a panic.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -58,7 +65,7 @@ "cwe_ids": [ "CWE-248" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-06-26T19:26:38Z", "nvd_published_at": "2024-06-27T18:15:13Z" diff --git a/advisories/github-reviewed/2024/06/GHSA-hq4f-mv3q-8wcv/GHSA-hq4f-mv3q-8wcv.json b/advisories/github-reviewed/2024/06/GHSA-hq4f-mv3q-8wcv/GHSA-hq4f-mv3q-8wcv.json index acc529cc5fa..708a7b4094c 100644 --- a/advisories/github-reviewed/2024/06/GHSA-hq4f-mv3q-8wcv/GHSA-hq4f-mv3q-8wcv.json +++ b/advisories/github-reviewed/2024/06/GHSA-hq4f-mv3q-8wcv/GHSA-hq4f-mv3q-8wcv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hq4f-mv3q-8wcv", - "modified": "2024-07-19T21:44:47Z", + "modified": "2024-08-02T15:50:19Z", "published": "2024-06-25T21:31:17Z", "aliases": [ "CVE-2024-37843" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ diff --git a/advisories/github-reviewed/2024/07/GHSA-f6f8-9mx6-9mx2/GHSA-f6f8-9mx6-9mx2.json b/advisories/github-reviewed/2024/07/GHSA-f6f8-9mx6-9mx2/GHSA-f6f8-9mx6-9mx2.json index e3c8223afa9..35ace77ddb4 100644 --- a/advisories/github-reviewed/2024/07/GHSA-f6f8-9mx6-9mx2/GHSA-f6f8-9mx6-9mx2.json +++ b/advisories/github-reviewed/2024/07/GHSA-f6f8-9mx6-9mx2/GHSA-f6f8-9mx6-9mx2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f6f8-9mx6-9mx2", - "modified": "2024-07-10T21:43:25Z", + "modified": "2024-08-02T15:52:17Z", "published": "2024-07-10T06:33:52Z", "aliases": [ "CVE-2024-39614" @@ -94,6 +94,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-130", "CWE-770" ], "severity": "HIGH", diff --git a/advisories/github-reviewed/2024/07/GHSA-vjpv-x8p9-7p85/GHSA-vjpv-x8p9-7p85.json b/advisories/github-reviewed/2024/07/GHSA-vjpv-x8p9-7p85/GHSA-vjpv-x8p9-7p85.json index 0e0a1fac463..a71744292e1 100644 --- a/advisories/github-reviewed/2024/07/GHSA-vjpv-x8p9-7p85/GHSA-vjpv-x8p9-7p85.json +++ b/advisories/github-reviewed/2024/07/GHSA-vjpv-x8p9-7p85/GHSA-vjpv-x8p9-7p85.json @@ -63,6 +63,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-241", "CWE-400" ], "severity": "HIGH",