From 1525b0a1d53d255a7683a1c6cb20db270827babb Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 15 Oct 2024 16:17:41 +0000 Subject: [PATCH] Publish GHSA-wgx7-jwwm-cgjv --- .../GHSA-wgx7-jwwm-cgjv.json | 29 ++++++++++++++++++- 1 file changed, 28 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2022/02/GHSA-wgx7-jwwm-cgjv/GHSA-wgx7-jwwm-cgjv.json b/advisories/github-reviewed/2022/02/GHSA-wgx7-jwwm-cgjv/GHSA-wgx7-jwwm-cgjv.json index a477d426d0a..bf01c50f257 100644 --- a/advisories/github-reviewed/2022/02/GHSA-wgx7-jwwm-cgjv/GHSA-wgx7-jwwm-cgjv.json +++ b/advisories/github-reviewed/2022/02/GHSA-wgx7-jwwm-cgjv/GHSA-wgx7-jwwm-cgjv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wgx7-jwwm-cgjv", - "modified": "2021-06-15T18:10:01Z", + "modified": "2024-10-15T16:15:45Z", "published": "2022-02-10T23:05:20Z", "aliases": [ "CVE-2020-9480" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -36,6 +40,25 @@ "database_specific": { "last_known_affected_version_range": "<= 2.4.5" } + }, + { + "package": { + "ecosystem": "PyPI", + "name": "pyspark" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.4.6" + } + ] + } + ] } ], "references": [ @@ -43,6 +66,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9480" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pyspark/PYSEC-2020-95.yaml" + }, { "type": "WEB", "url": "https://lists.apache.org/thread.html/r03ad9fe7c07d6039fba9f2152d345274473cb0af3d8a4794a6645f4b@%3Cuser.spark.apache.org%3E"