From 15780a486253735ff7aa8d616e9daab572f38e49 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 5 Jan 2024 19:51:06 +0000
Subject: [PATCH] Publish Advisories

GHSA-2268-98wh-qfhf
GHSA-fgwc-3j6w-ch22
GHSA-v7hg-77v9-2445
---
 .../12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json    | 10 +++++++---
 .../12/GHSA-fgwc-3j6w-ch22/GHSA-fgwc-3j6w-ch22.json    |  9 ++++++---
 .../12/GHSA-v7hg-77v9-2445/GHSA-v7hg-77v9-2445.json    |  7 +++++--
 3 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/advisories/github-reviewed/2023/12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json b/advisories/github-reviewed/2023/12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json
index f1a0a3c059d..7babfaaeff1 100644
--- a/advisories/github-reviewed/2023/12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json
+++ b/advisories/github-reviewed/2023/12/GHSA-2268-98wh-qfhf/GHSA-2268-98wh-qfhf.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2268-98wh-qfhf",
-  "modified": "2023-12-29T20:08:20Z",
+  "modified": "2024-01-05T19:49:51Z",
   "published": "2023-12-29T15:30:37Z",
   "aliases": [
     "CVE-2023-50572"
@@ -9,7 +9,10 @@
   "summary": "JLine vulnerable to out of memory error",
   "details": "An issue in the component `GroovyEngine.execute` of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -52,7 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,
diff --git a/advisories/github-reviewed/2023/12/GHSA-fgwc-3j6w-ch22/GHSA-fgwc-3j6w-ch22.json b/advisories/github-reviewed/2023/12/GHSA-fgwc-3j6w-ch22/GHSA-fgwc-3j6w-ch22.json
index 02f0db63a6a..ca1b765864e 100644
--- a/advisories/github-reviewed/2023/12/GHSA-fgwc-3j6w-ch22/GHSA-fgwc-3j6w-ch22.json
+++ b/advisories/github-reviewed/2023/12/GHSA-fgwc-3j6w-ch22/GHSA-fgwc-3j6w-ch22.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fgwc-3j6w-ch22",
-  "modified": "2023-12-29T19:42:00Z",
+  "modified": "2024-01-05T19:49:32Z",
   "published": "2023-12-29T15:30:37Z",
   "aliases": [
     "CVE-2023-50571"
@@ -9,7 +9,10 @@
   "summary": "easy-rules-mvel vulnerable to remote code execution",
   "details": "easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component `mVELRule`.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -40,7 +43,7 @@
     "cwe_ids": [
 
     ],
-    "severity": "CRITICAL",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-12-29T19:42:00Z",
     "nvd_published_at": "2023-12-29T15:15:09Z"
diff --git a/advisories/github-reviewed/2023/12/GHSA-v7hg-77v9-2445/GHSA-v7hg-77v9-2445.json b/advisories/github-reviewed/2023/12/GHSA-v7hg-77v9-2445/GHSA-v7hg-77v9-2445.json
index 0639fcda7a4..74c4ae7668e 100644
--- a/advisories/github-reviewed/2023/12/GHSA-v7hg-77v9-2445/GHSA-v7hg-77v9-2445.json
+++ b/advisories/github-reviewed/2023/12/GHSA-v7hg-77v9-2445/GHSA-v7hg-77v9-2445.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v7hg-77v9-2445",
-  "modified": "2024-01-03T21:39:56Z",
+  "modified": "2024-01-05T19:50:03Z",
   "published": "2023-12-30T18:30:37Z",
   "aliases": [
     "CVE-2023-49299"
@@ -9,7 +9,10 @@
   "summary": "Apache DolphinScheduler: Arbitrary js execute as root for authenticated users",
   "details": "Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9.\n\nUsers are recommended to upgrade to version 3.1.9, which fixes the issue.\n\n",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {