Publish Advisories

GHSA-5hmm-x8q8-w5jh
GHSA-gmpq-xrxj-xh8m
GHSA-5h86-8mv2-jq9f

advisories/github-reviewed/2020/11/GHSA-5hmm-x8q8-w5jh/GHSA-5hmm-x8q8-w5jh.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5hmm-x8q8-w5jh",
-  "modified": "2021-01-07T22:49:18Z",
+  "modified": "2024-09-04T19:53:05Z",
   "published": "2020-11-06T17:35:49Z",
   "aliases": [
     "CVE-2020-26214"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -75,6 +79,14 @@
       "type": "WEB",
       "url": "https://github.com/alerta/alerta/commit/2bfa31779a4c9df2fa68fa4d0c5c909698c5ef65"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/alerta/alerta"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/alerta-server/PYSEC-2020-159.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://pypi.org/project/alerta-server/8.1.0"
@@ -88,7 +100,7 @@
     "cwe_ids": [
       "CWE-287"
     ],
-    "severity": "HIGH",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2020-11-06T17:34:42Z",
     "nvd_published_at": null

advisories/github-reviewed/2022/11/GHSA-gmpq-xrxj-xh8m/GHSA-gmpq-xrxj-xh8m.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gmpq-xrxj-xh8m",
-  "modified": "2023-02-07T04:09:29Z",
+  "modified": "2024-09-04T19:54:07Z",
   "published": "2022-11-11T00:05:15Z",
   "aliases": [
     "CVE-2022-41892"
@@ -106,6 +106,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/archesproject/arches"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/arches/PYSEC-2022-42985.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://pypi.org/project/arches/6.1.2"

advisories/github-reviewed/2024/01/GHSA-5h86-8mv2-jq9f/GHSA-5h86-8mv2-jq9f.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5h86-8mv2-jq9f",
-  "modified": "2024-02-09T03:32:58Z",
+  "modified": "2024-09-04T19:54:04Z",
   "published": "2024-01-29T22:31:03Z",
   "aliases": [
     "CVE-2024-23334"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [