Publish Advisories

GHSA-g67g-hvc3-xmvf
GHSA-vw35-c8hf-fwmq

advisories/github-reviewed/2021/10/GHSA-g67g-hvc3-xmvf/GHSA-g67g-hvc3-xmvf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g67g-hvc3-xmvf",
-  "modified": "2021-10-14T18:50:58Z",
+  "modified": "2024-10-08T12:42:26Z",
   "published": "2021-10-14T21:19:23Z",
   "aliases": [
     "CVE-2021-41132"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -20,11 +24,6 @@
         "ecosystem": "PyPI",
         "name": "omero-web"
       },
-      "ecosystem_specific": {
-        "affected_functions": [
-          "omeroweb.webclient.views.load_metadata_preview"
-        ]
-      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -76,6 +75,14 @@
       "type": "PACKAGE",
       "url": "https://github.com/ome/omero-web"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/omero-figure/PYSEC-2021-379.yaml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2021-372.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://www.openmicroscopy.org/security/advisories/2021-SV3"

advisories/github-reviewed/2022/05/GHSA-vw35-c8hf-fwmq/GHSA-vw35-c8hf-fwmq.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vw35-c8hf-fwmq",
-  "modified": "2024-02-23T20:52:13Z",
+  "modified": "2024-10-08T12:41:48Z",
   "published": "2022-05-24T19:15:55Z",
   "aliases": [
     "CVE-2021-31604"
@@ -9,7 +9,14 @@
   "summary": "furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client",
   "details": "furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -45,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/furlongm/openvpn-monitor/releases"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/openvpn-monitor/PYSEC-2021-352.yaml"
+    },
     {
       "type": "WEB",
       "url": "http://packetstormsecurity.com/files/164281/OpenVPN-Monitor-1.1.3-Cross-Site-Request-Forgery.html"