diff --git a/advisories/github-reviewed/2024/07/GHSA-3wf2-2pq4-4rvc/GHSA-3wf2-2pq4-4rvc.json b/advisories/github-reviewed/2024/07/GHSA-3wf2-2pq4-4rvc/GHSA-3wf2-2pq4-4rvc.json index 3e3c4071604..9c280675651 100644 --- a/advisories/github-reviewed/2024/07/GHSA-3wf2-2pq4-4rvc/GHSA-3wf2-2pq4-4rvc.json +++ b/advisories/github-reviewed/2024/07/GHSA-3wf2-2pq4-4rvc/GHSA-3wf2-2pq4-4rvc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3wf2-2pq4-4rvc", - "modified": "2024-07-19T19:59:06Z", + "modified": "2024-07-22T13:17:47Z", "published": "2024-07-19T19:59:06Z", "aliases": [ "CVE-2024-41122" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -59,6 +63,14 @@ "type": "WEB", "url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41122" + }, + { + "type": "WEB", + "url": "https://github.com/woodpecker-ci/woodpecker-security/issues/10" + }, { "type": "WEB", "url": "https://github.com/woodpecker-ci/woodpecker/issues/3929" @@ -87,6 +99,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-07-19T19:59:06Z", - "nvd_published_at": null + "nvd_published_at": "2024-07-19T20:15:08Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/07/GHSA-rwcj-7jjp-4w38/GHSA-rwcj-7jjp-4w38.json b/advisories/github-reviewed/2024/07/GHSA-rwcj-7jjp-4w38/GHSA-rwcj-7jjp-4w38.json index 1770db7f5bc..92f771570d3 100644 --- a/advisories/github-reviewed/2024/07/GHSA-rwcj-7jjp-4w38/GHSA-rwcj-7jjp-4w38.json +++ b/advisories/github-reviewed/2024/07/GHSA-rwcj-7jjp-4w38/GHSA-rwcj-7jjp-4w38.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rwcj-7jjp-4w38", - "modified": "2024-07-19T19:59:14Z", + "modified": "2024-07-22T13:18:35Z", "published": "2024-07-19T19:59:14Z", "aliases": [ "CVE-2024-41124" @@ -44,6 +44,10 @@ "type": "WEB", "url": "https://github.com/ARPSyndicate/puncia/security/advisories/GHSA-rwcj-7jjp-4w38" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41124" + }, { "type": "WEB", "url": "https://github.com/ARPSyndicate/puncia/issues/8" @@ -52,6 +56,10 @@ "type": "WEB", "url": "https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd" }, + { + "type": "WEB", + "url": "https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd#diff-3ec6c2de51e702726b23c452e3f4a899f6f4253af9fbf5be7254a5c1407ab526" + }, { "type": "PACKAGE", "url": "https://github.com/ARPSyndicate/puncia" @@ -59,11 +67,12 @@ ], "database_specific": { "cwe_ids": [ + "CWE-311", "CWE-319" ], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-07-19T19:59:14Z", - "nvd_published_at": null + "nvd_published_at": "2024-07-19T20:15:08Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/07/GHSA-xw35-rrcp-g7xm/GHSA-xw35-rrcp-g7xm.json b/advisories/github-reviewed/2024/07/GHSA-xw35-rrcp-g7xm/GHSA-xw35-rrcp-g7xm.json index 15aab711815..7aec31c5a8b 100644 --- a/advisories/github-reviewed/2024/07/GHSA-xw35-rrcp-g7xm/GHSA-xw35-rrcp-g7xm.json +++ b/advisories/github-reviewed/2024/07/GHSA-xw35-rrcp-g7xm/GHSA-xw35-rrcp-g7xm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xw35-rrcp-g7xm", - "modified": "2024-07-19T19:59:08Z", + "modified": "2024-07-22T13:18:35Z", "published": "2024-07-19T19:59:08Z", "aliases": [ "CVE-2024-41121" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -59,10 +63,26 @@ "type": "WEB", "url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41121" + }, + { + "type": "WEB", + "url": "https://github.com/woodpecker-ci/woodpecker-security/issues/8" + }, + { + "type": "WEB", + "url": "https://github.com/woodpecker-ci/woodpecker-security/issues/9" + }, { "type": "WEB", "url": "https://github.com/woodpecker-ci/woodpecker/issues/3924" }, + { + "type": "WEB", + "url": "https://github.com/woodpecker-ci/woodpecker-security/pull/11" + }, { "type": "WEB", "url": "https://github.com/woodpecker-ci/woodpecker/pull/3933" @@ -78,11 +98,12 @@ ], "database_specific": { "cwe_ids": [ - "CWE-22" + "CWE-22", + "CWE-74" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-07-19T19:59:08Z", - "nvd_published_at": null + "nvd_published_at": "2024-07-19T20:15:08Z" } } \ No newline at end of file