From 120e00f759f4c88ef82ae82e02c676f80b61887d Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 10 Apr 2023 19:02:39 +0000
Subject: [PATCH] Publish Advisories

GHSA-h6q3-vv32-2cq5
GHSA-776f-qx25-q3cc
---
 .../GHSA-h6q3-vv32-2cq5.json                   |  6 +++---
 .../GHSA-776f-qx25-q3cc.json                   | 18 +++++++++++-------
 2 files changed, 14 insertions(+), 10 deletions(-)

diff --git a/advisories/github-reviewed/2022/11/GHSA-h6q3-vv32-2cq5/GHSA-h6q3-vv32-2cq5.json b/advisories/github-reviewed/2022/11/GHSA-h6q3-vv32-2cq5/GHSA-h6q3-vv32-2cq5.json
index cad3b8e63fb..5d88434545b 100644
--- a/advisories/github-reviewed/2022/11/GHSA-h6q3-vv32-2cq5/GHSA-h6q3-vv32-2cq5.json
+++ b/advisories/github-reviewed/2022/11/GHSA-h6q3-vv32-2cq5/GHSA-h6q3-vv32-2cq5.json
@@ -18,7 +18,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "tflite"
+        "name": "tensorflow"
       },
       "ranges": [
         {
@@ -37,7 +37,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "tflite"
+        "name": "tensorflow"
       },
       "ranges": [
         {
@@ -56,7 +56,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "tflite"
+        "name": "tensorflow"
       },
       "ranges": [
         {
diff --git a/advisories/github-reviewed/2023/04/GHSA-776f-qx25-q3cc/GHSA-776f-qx25-q3cc.json b/advisories/github-reviewed/2023/04/GHSA-776f-qx25-q3cc/GHSA-776f-qx25-q3cc.json
index 692b9173368..4137b2e1691 100644
--- a/advisories/github-reviewed/2023/04/GHSA-776f-qx25-q3cc/GHSA-776f-qx25-q3cc.json
+++ b/advisories/github-reviewed/2023/04/GHSA-776f-qx25-q3cc/GHSA-776f-qx25-q3cc.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-776f-qx25-q3cc",
-  "modified": "2023-04-07T21:00:54Z",
+  "modified": "2023-04-10T19:01:29Z",
   "published": "2023-04-05T21:30:24Z",
   "aliases": [
     "CVE-2023-0842"
   ],
   "summary": "xml2js is vulnerable to prototype pollution ",
-  "details": "xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the `__proto__` property to be edited.",
+  "details": "xml2js versions before 0.5.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the `__proto__` property to be edited.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -28,7 +28,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "0.4.23"
+              "fixed": "0.5.0"
             }
           ]
         }
@@ -40,6 +40,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0842"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Leonidas-from-XIV/node-xml2js/issues/663"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Leonidas-from-XIV/node-xml2js/pull/603/commits/581b19a62d88f8a3c068b5a45f4542c2d6a495a5"
+    },
     {
       "type": "WEB",
       "url": "https://fluidattacks.com/advisories/myers/"
@@ -47,10 +55,6 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/Leonidas-from-XIV/node-xml2js"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/Leonidas-from-XIV/node-xml2js/"
     }
   ],
   "database_specific": {