From 1adebeb4541763bba5eebb8af99d8ff1a651b218 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 6 Nov 2024 23:32:58 +0000
Subject: [PATCH] Publish Advisories

GHSA-ff72-ff42-c3gw
GHSA-6377-hfv9-hqf6
GHSA-jjxq-ff2g-95vh
---
 .../GHSA-ff72-ff42-c3gw.json                  |  6 +++++-
 .../GHSA-6377-hfv9-hqf6.json                  | 20 +++++++++++++++----
 .../GHSA-jjxq-ff2g-95vh.json                  | 20 +++++++++++++++----
 3 files changed, 37 insertions(+), 9 deletions(-)

diff --git a/advisories/github-reviewed/2024/02/GHSA-ff72-ff42-c3gw/GHSA-ff72-ff42-c3gw.json b/advisories/github-reviewed/2024/02/GHSA-ff72-ff42-c3gw/GHSA-ff72-ff42-c3gw.json
index 42566e72710..d907c0407c7 100644
--- a/advisories/github-reviewed/2024/02/GHSA-ff72-ff42-c3gw/GHSA-ff72-ff42-c3gw.json
+++ b/advisories/github-reviewed/2024/02/GHSA-ff72-ff42-c3gw/GHSA-ff72-ff42-c3gw.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ff72-ff42-c3gw",
-  "modified": "2024-02-20T23:46:51Z",
+  "modified": "2024-11-06T23:31:23Z",
   "published": "2024-02-17T06:30:34Z",
   "aliases": [
     "CVE-2024-21496"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
     }
   ],
   "affected": [
diff --git a/advisories/github-reviewed/2024/11/GHSA-6377-hfv9-hqf6/GHSA-6377-hfv9-hqf6.json b/advisories/github-reviewed/2024/11/GHSA-6377-hfv9-hqf6/GHSA-6377-hfv9-hqf6.json
index fcfab58f2fc..53aa38914ae 100644
--- a/advisories/github-reviewed/2024/11/GHSA-6377-hfv9-hqf6/GHSA-6377-hfv9-hqf6.json
+++ b/advisories/github-reviewed/2024/11/GHSA-6377-hfv9-hqf6/GHSA-6377-hfv9-hqf6.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6377-hfv9-hqf6",
-  "modified": "2024-11-06T19:52:31Z",
+  "modified": "2024-11-06T23:31:50Z",
   "published": "2024-11-06T19:52:31Z",
   "aliases": [
     "CVE-2024-51754"
@@ -29,7 +29,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "1.0.0"
             },
             {
               "fixed": "3.11.2"
@@ -48,7 +48,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "3.12"
+              "introduced": "3.12.0"
             },
             {
               "fixed": "3.14.1"
@@ -63,13 +63,25 @@
       "type": "WEB",
       "url": "https://github.com/twigphp/Twig/security/advisories/GHSA-6377-hfv9-hqf6"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51754"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/twigphp/Twig/commit/2bb8c2460a2c519c498df9b643d5277117155a73"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2024-51754.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/twigphp/Twig"
+    },
+    {
+      "type": "WEB",
+      "url": "https://symfony.com/blog/unguarded-calls-to-__tostring-when-nesting-an-object-into-an-array"
     }
   ],
   "database_specific": {
@@ -79,6 +91,6 @@
     "severity": "LOW",
     "github_reviewed": true,
     "github_reviewed_at": "2024-11-06T19:52:31Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-11-06T20:15:05Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/11/GHSA-jjxq-ff2g-95vh/GHSA-jjxq-ff2g-95vh.json b/advisories/github-reviewed/2024/11/GHSA-jjxq-ff2g-95vh/GHSA-jjxq-ff2g-95vh.json
index af16757d24c..3a77b123d59 100644
--- a/advisories/github-reviewed/2024/11/GHSA-jjxq-ff2g-95vh/GHSA-jjxq-ff2g-95vh.json
+++ b/advisories/github-reviewed/2024/11/GHSA-jjxq-ff2g-95vh/GHSA-jjxq-ff2g-95vh.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jjxq-ff2g-95vh",
-  "modified": "2024-11-06T19:52:55Z",
+  "modified": "2024-11-06T23:32:07Z",
   "published": "2024-11-06T19:52:55Z",
   "aliases": [
     "CVE-2024-51755"
@@ -29,7 +29,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "1.0.0"
             },
             {
               "fixed": "3.11.2"
@@ -48,7 +48,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "3.12"
+              "introduced": "3.12.0"
             },
             {
               "fixed": "3.14.1"
@@ -63,13 +63,25 @@
       "type": "WEB",
       "url": "https://github.com/twigphp/Twig/security/advisories/GHSA-jjxq-ff2g-95vh"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51755"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/twigphp/Twig/commit/831c148e786178e5f2fde9db67266be3bf241c21"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2024-51755.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/twigphp/Twig"
+    },
+    {
+      "type": "WEB",
+      "url": "https://symfony.com/blog/unguarded-calls-to-__isset-and-to-array-accesses-when-the-sandbox-is-enabled"
     }
   ],
   "database_specific": {
@@ -79,6 +91,6 @@
     "severity": "LOW",
     "github_reviewed": true,
     "github_reviewed_at": "2024-11-06T19:52:55Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-11-06T20:15:06Z"
   }
 }
\ No newline at end of file