diff --git a/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json b/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json index 6f09a503d99..cfbdfe733e7 100644 --- a/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json +++ b/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json @@ -59,6 +59,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-22", "CWE-29" ], "severity": "HIGH", diff --git a/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json b/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json index f24951aebd5..60eb9ec9a2e 100644 --- a/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json +++ b/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-25qx-vfw2-fw8r", - "modified": "2024-08-15T21:24:57Z", + "modified": "2024-09-25T19:27:54Z", "published": "2024-08-15T00:30:59Z", "aliases": [ "CVE-2024-7625" ], "summary": "Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking", - "details": "In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.16.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.", + "details": "In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json b/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json index ac736aa715e..13ba66521e1 100644 --- a/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json +++ b/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-723h-x37g-f8qm", - "modified": "2024-09-18T19:34:07Z", + "modified": "2024-09-25T19:28:11Z", "published": "2024-09-18T18:30:51Z", "aliases": [ "CVE-2023-47105" @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/chaosblade-io/chaosblade/commit/6bc73c31e14ea2b1bfc30f359e1fe952859d9adc" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-723h-x37g-f8qm" + }, { "type": "PACKAGE", "url": "https://github.com/chaosblade-io/chaosblade" diff --git a/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json b/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json index b4117902536..2d34ab1e58d 100644 --- a/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json +++ b/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hfmw-7g3m-gj6q", - "modified": "2024-09-18T17:38:50Z", + "modified": "2024-09-25T19:27:57Z", "published": "2024-09-18T15:30:52Z", "aliases": [ "CVE-2023-28452" @@ -56,6 +56,10 @@ "type": "WEB", "url": "https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-hfmw-7g3m-gj6q" + }, { "type": "PACKAGE", "url": "https://github.com/coredns/coredns"