From 1317e26438d7ca04f217c96f334a13dcee492a08 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 19 Mar 2025 15:38:00 +0000
Subject: [PATCH] Publish Advisories

GHSA-mpvx-whpp-99xj
GHSA-8fc2-fhh6-f6m5
GHSA-qxp5-gwg8-xv66
---
 .../07/GHSA-mpvx-whpp-99xj/GHSA-mpvx-whpp-99xj.json    |  2 +-
 .../02/GHSA-8fc2-fhh6-f6m5/GHSA-8fc2-fhh6-f6m5.json    |  1 +
 .../03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json    | 10 ++++++++--
 3 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/advisories/github-reviewed/2024/07/GHSA-mpvx-whpp-99xj/GHSA-mpvx-whpp-99xj.json b/advisories/github-reviewed/2024/07/GHSA-mpvx-whpp-99xj/GHSA-mpvx-whpp-99xj.json
index a3bc8e2820a..7aaa1721f3b 100644
--- a/advisories/github-reviewed/2024/07/GHSA-mpvx-whpp-99xj/GHSA-mpvx-whpp-99xj.json
+++ b/advisories/github-reviewed/2024/07/GHSA-mpvx-whpp-99xj/GHSA-mpvx-whpp-99xj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mpvx-whpp-99xj",
-  "modified": "2024-08-07T19:27:52Z",
+  "modified": "2025-03-19T15:35:13Z",
   "published": "2024-07-31T21:32:38Z",
   "aliases": [
     "CVE-2024-41256"
diff --git a/advisories/github-reviewed/2025/02/GHSA-8fc2-fhh6-f6m5/GHSA-8fc2-fhh6-f6m5.json b/advisories/github-reviewed/2025/02/GHSA-8fc2-fhh6-f6m5/GHSA-8fc2-fhh6-f6m5.json
index d04810dee17..f38cfca2c18 100644
--- a/advisories/github-reviewed/2025/02/GHSA-8fc2-fhh6-f6m5/GHSA-8fc2-fhh6-f6m5.json
+++ b/advisories/github-reviewed/2025/02/GHSA-8fc2-fhh6-f6m5/GHSA-8fc2-fhh6-f6m5.json
@@ -51,6 +51,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-269",
       "CWE-307"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/github-reviewed/2025/03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json b/advisories/github-reviewed/2025/03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json
index d0b170cacb4..57b51a1357f 100644
--- a/advisories/github-reviewed/2025/03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json
+++ b/advisories/github-reviewed/2025/03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json
@@ -1,14 +1,19 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qxp5-gwg8-xv66",
-  "modified": "2025-03-12T22:06:40Z",
+  "modified": "2025-03-19T15:36:20Z",
   "published": "2025-03-12T22:06:40Z",
   "aliases": [
     "CVE-2025-22870"
   ],
   "summary": "HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net",
   "details": "Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L"
+    }
+  ],
   "affected": [
     {
       "package": {
@@ -58,6 +63,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-115",
       "CWE-20"
     ],
     "severity": "MODERATE",