Publish Advisories

GHSA-2268-98wh-qfhf
GHSA-fgwc-3j6w-ch22
GHSA-v7hg-77v9-2445

advisories/github-reviewed/2023/12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2268-98wh-qfhf",
-  "modified": "2023-12-29T20:08:20Z",
+  "modified": "2024-01-05T19:49:51Z",
   "published": "2023-12-29T15:30:37Z",
   "aliases": [
     "CVE-2023-50572"
@@ -9,7 +9,10 @@
   "summary": "JLine vulnerable to out of memory error",
   "details": "An issue in the component `GroovyEngine.execute` of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -52,7 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,

advisories/github-reviewed/2023/12/GHSA-fgwc-3j6w-ch22/GHSA-fgwc-3j6w-ch22.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fgwc-3j6w-ch22",
-  "modified": "2023-12-29T19:42:00Z",
+  "modified": "2024-01-05T19:49:32Z",
   "published": "2023-12-29T15:30:37Z",
   "aliases": [
     "CVE-2023-50571"
@@ -9,7 +9,10 @@
   "summary": "easy-rules-mvel vulnerable to remote code execution",
   "details": "easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component `mVELRule`.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -40,7 +43,7 @@
     "cwe_ids": [
 
     ],
-    "severity": "CRITICAL",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-12-29T19:42:00Z",
     "nvd_published_at": "2023-12-29T15:15:09Z"

advisories/github-reviewed/2023/12/GHSA-v7hg-77v9-2445/GHSA-v7hg-77v9-2445.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v7hg-77v9-2445",
-  "modified": "2024-01-03T21:39:56Z",
+  "modified": "2024-01-05T19:50:03Z",
   "published": "2023-12-30T18:30:37Z",
   "aliases": [
     "CVE-2023-49299"
@@ -9,7 +9,10 @@
   "summary": "Apache DolphinScheduler: Arbitrary js execute as root for authenticated users",
   "details": "Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9.\n\nUsers are recommended to upgrade to version 3.1.9, which fixes the issue.\n\n",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {