From 0f75cdb0d8ea8ecc7d438513554f497be361eebc Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 25 Sep 2024 19:28:39 +0000
Subject: [PATCH] Publish Advisories

GHSA-3x47-w4rx-6pm7
GHSA-25qx-vfw2-fw8r
GHSA-723h-x37g-f8qm
GHSA-hfmw-7g3m-gj6q
---
 .../2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json    | 1 +
 .../2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json    | 4 ++--
 .../2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json    | 6 +++++-
 .../2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json    | 6 +++++-
 4 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json b/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json
index 6f09a503d99..cfbdfe733e7 100644
--- a/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json
+++ b/advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json
@@ -59,6 +59,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-22",
       "CWE-29"
     ],
     "severity": "HIGH",
diff --git a/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json b/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json
index f24951aebd5..60eb9ec9a2e 100644
--- a/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json
+++ b/advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-25qx-vfw2-fw8r",
-  "modified": "2024-08-15T21:24:57Z",
+  "modified": "2024-09-25T19:27:54Z",
   "published": "2024-08-15T00:30:59Z",
   "aliases": [
     "CVE-2024-7625"
   ],
   "summary": "Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking",
-  "details": "In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.16.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.",
+  "details": "In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json b/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json
index ac736aa715e..13ba66521e1 100644
--- a/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json
+++ b/advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-723h-x37g-f8qm",
-  "modified": "2024-09-18T19:34:07Z",
+  "modified": "2024-09-25T19:28:11Z",
   "published": "2024-09-18T18:30:51Z",
   "aliases": [
     "CVE-2023-47105"
@@ -48,6 +48,10 @@
       "type": "WEB",
       "url": "https://github.com/chaosblade-io/chaosblade/commit/6bc73c31e14ea2b1bfc30f359e1fe952859d9adc"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-723h-x37g-f8qm"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/chaosblade-io/chaosblade"
diff --git a/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json b/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json
index b4117902536..2d34ab1e58d 100644
--- a/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json
+++ b/advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hfmw-7g3m-gj6q",
-  "modified": "2024-09-18T17:38:50Z",
+  "modified": "2024-09-25T19:27:57Z",
   "published": "2024-09-18T15:30:52Z",
   "aliases": [
     "CVE-2023-28452"
@@ -56,6 +56,10 @@
       "type": "WEB",
       "url": "https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-hfmw-7g3m-gj6q"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/coredns/coredns"