diff --git a/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json b/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
new file mode 100644
index 00000000000..3f9bec896a9
--- /dev/null
+++ b/advisories/github-reviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
@@ -0,0 +1,179 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-9mvj-f7w8-pvh2",
+ "modified": "2024-08-01T21:28:38Z",
+ "published": "2024-07-11T18:31:14Z",
+ "aliases": [
+ "CVE-2024-6484"
+ ],
+ "summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
+ "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L"
+ },
+ {
+ "type": "CVSS_V4",
+ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:L"
+ }
+ ],
+ "affected": [
+ {
+ "package": {
+ "ecosystem": "npm",
+ "name": "bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "RubyGems",
+ "name": "bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "NuGet",
+ "name": "bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "RubyGems",
+ "name": "bootstrap-sass"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "NuGet",
+ "name": "bootstrap.sass"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "Packagist",
+ "name": "twbs/bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "Maven",
+ "name": "org.webjars:bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "2.0.0"
+ },
+ {
+ "last_affected": "3.4.1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6484"
+ },
+ {
+ "type": "PACKAGE",
+ "url": "https://github.com/twbs/bootstrap"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.herodevs.com/vulnerability-directory/cve-2024-6484"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": true,
+ "github_reviewed_at": "2024-08-01T21:28:38Z",
+ "nvd_published_at": "2024-07-11T17:15:17Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/07/GHSA-vc8w-jr9v-vj7f/GHSA-vc8w-jr9v-vj7f.json b/advisories/github-reviewed/2024/07/GHSA-vc8w-jr9v-vj7f/GHSA-vc8w-jr9v-vj7f.json
new file mode 100644
index 00000000000..cbfaae551b6
--- /dev/null
+++ b/advisories/github-reviewed/2024/07/GHSA-vc8w-jr9v-vj7f/GHSA-vc8w-jr9v-vj7f.json
@@ -0,0 +1,160 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-vc8w-jr9v-vj7f",
+ "modified": "2024-08-01T21:29:24Z",
+ "published": "2024-07-11T18:31:14Z",
+ "aliases": [
+ "CVE-2024-6531"
+ ],
+ "summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
+ "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L"
+ },
+ {
+ "type": "CVSS_V4",
+ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:L"
+ }
+ ],
+ "affected": [
+ {
+ "package": {
+ "ecosystem": "npm",
+ "name": "bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "4.0.0"
+ },
+ {
+ "last_affected": "4.6.2"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "RubyGems",
+ "name": "bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "4.0.0"
+ },
+ {
+ "last_affected": "4.6.2"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "NuGet",
+ "name": "bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "4.0.0"
+ },
+ {
+ "last_affected": "4.6.2"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "NuGet",
+ "name": "bootstrap.sass"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "4.0.0"
+ },
+ {
+ "last_affected": "4.6.2"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "Packagist",
+ "name": "twbs/bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "4.0.0"
+ },
+ {
+ "last_affected": "4.6.2"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "Maven",
+ "name": "org.webjars:bootstrap"
+ },
+ "ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "4.0.0"
+ },
+ {
+ "last_affected": "4.6.2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6531"
+ },
+ {
+ "type": "PACKAGE",
+ "url": "https://github.com/twbs/bootstrap"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": true,
+ "github_reviewed_at": "2024-08-01T21:29:23Z",
+ "nvd_published_at": "2024-07-11T18:15:06Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json b/advisories/unreviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
deleted file mode 100644
index 8290ea392a6..00000000000
--- a/advisories/unreviewed/2024/07/GHSA-9mvj-f7w8-pvh2/GHSA-9mvj-f7w8-pvh2.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
- "schema_version": "1.4.0",
- "id": "GHSA-9mvj-f7w8-pvh2",
- "modified": "2024-07-11T18:31:14Z",
- "published": "2024-07-11T18:31:14Z",
- "aliases": [
- "CVE-2024-6484"
- ],
- "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
- "severity": [
- {
- "type": "CVSS_V3",
- "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L"
- }
- ],
- "affected": [
-
- ],
- "references": [
- {
- "type": "ADVISORY",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6484"
- },
- {
- "type": "WEB",
- "url": "https://www.herodevs.com/vulnerability-directory/cve-2024-6484"
- }
- ],
- "database_specific": {
- "cwe_ids": [
- "CWE-79"
- ],
- "severity": "MODERATE",
- "github_reviewed": false,
- "github_reviewed_at": null,
- "nvd_published_at": "2024-07-11T17:15:17Z"
- }
-}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-vc8w-jr9v-vj7f/GHSA-vc8w-jr9v-vj7f.json b/advisories/unreviewed/2024/07/GHSA-vc8w-jr9v-vj7f/GHSA-vc8w-jr9v-vj7f.json
deleted file mode 100644
index feea18286e9..00000000000
--- a/advisories/unreviewed/2024/07/GHSA-vc8w-jr9v-vj7f/GHSA-vc8w-jr9v-vj7f.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
- "schema_version": "1.4.0",
- "id": "GHSA-vc8w-jr9v-vj7f",
- "modified": "2024-07-11T18:31:14Z",
- "published": "2024-07-11T18:31:14Z",
- "aliases": [
- "CVE-2024-6531"
- ],
- "details": "A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.",
- "severity": [
- {
- "type": "CVSS_V3",
- "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L"
- }
- ],
- "affected": [
-
- ],
- "references": [
- {
- "type": "ADVISORY",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6531"
- },
- {
- "type": "WEB",
- "url": "https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
- }
- ],
- "database_specific": {
- "cwe_ids": [
- "CWE-79"
- ],
- "severity": "MODERATE",
- "github_reviewed": false,
- "github_reviewed_at": null,
- "nvd_published_at": "2024-07-11T18:15:06Z"
- }
-}
\ No newline at end of file