Publish Advisories

GHSA-mpvx-whpp-99xj
GHSA-8fc2-fhh6-f6m5
GHSA-qxp5-gwg8-xv66

advisories/github-reviewed/2024/07/GHSA-mpvx-whpp-99xj/GHSA-mpvx-whpp-99xj.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mpvx-whpp-99xj",
-  "modified": "2024-08-07T19:27:52Z",
+  "modified": "2025-03-19T15:35:13Z",
   "published": "2024-07-31T21:32:38Z",
   "aliases": [
     "CVE-2024-41256"

advisories/github-reviewed/2025/02/GHSA-8fc2-fhh6-f6m5/GHSA-8fc2-fhh6-f6m5.json

@@ -51,6 +51,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-269",
       "CWE-307"
     ],
     "severity": "CRITICAL",

advisories/github-reviewed/2025/03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json

@@ -1,14 +1,19 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qxp5-gwg8-xv66",
-  "modified": "2025-03-12T22:06:40Z",
+  "modified": "2025-03-19T15:36:20Z",
   "published": "2025-03-12T22:06:40Z",
   "aliases": [
     "CVE-2025-22870"
   ],
   "summary": "HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net",
   "details": "Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L"
+    }
+  ],
   "affected": [
     {
       "package": {
@@ -58,6 +63,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-115",
       "CWE-20"
     ],
     "severity": "MODERATE",