diff --git a/advisories/github-reviewed/2021/09/GHSA-3j6g-hxx5-3q26/GHSA-3j6g-hxx5-3q26.json b/advisories/github-reviewed/2021/09/GHSA-3j6g-hxx5-3q26/GHSA-3j6g-hxx5-3q26.json index 25ec5292edd..54662d4609e 100644 --- a/advisories/github-reviewed/2021/09/GHSA-3j6g-hxx5-3q26/GHSA-3j6g-hxx5-3q26.json +++ b/advisories/github-reviewed/2021/09/GHSA-3j6g-hxx5-3q26/GHSA-3j6g-hxx5-3q26.json @@ -18,7 +18,12 @@ { "package": { "ecosystem": "Maven", - "name": "org.apache.kafka:kafka" + "name": "org.apache.kafka:kafka_2.11" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] }, "ranges": [ { @@ -27,11 +32,236 @@ { "introduced": "2.0.0" }, + { + "last_affected": "2.4.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka_2.12" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "fixed": "2.6.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka_2.12" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka_2.12" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, { "fixed": "2.8.1" } ] } + ], + "versions": [ + "2.8.0" + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka_2.13" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.4.0" + }, + { + "fixed": "2.6.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka_2.13" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka_2.13" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.1" + } + ] + } + ], + "versions": [ + "2.8.0" + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka-clients" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "fixed": "2.6.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka-clients" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.kafka:kafka-clients" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0" + }, + { + "fixed": "2.8.1" + } + ] + } + ], + "versions": [ + "2.8.0" ] } ], @@ -76,6 +306,10 @@ "type": "WEB", "url": "https://lists.apache.org/thread.html/rd9ef217b09fdefaf32a4e1835b59b96629542db57e1f63edb8b006e6@%3Cusers.kafka.apache.org%3E" }, + { + "type": "WEB", + "url": "https://support.confluent.io/hc/en-us/articles/4407632156692-CVE-2021-38153-Confluent-Platform-Vulnerability-Timing-attacks" + }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" diff --git a/advisories/github-reviewed/2023/01/GHSA-88p8-4vv5-82j7/GHSA-88p8-4vv5-82j7.json b/advisories/github-reviewed/2023/01/GHSA-88p8-4vv5-82j7/GHSA-88p8-4vv5-82j7.json index e27684d9029..4e2e373e3f1 100644 --- a/advisories/github-reviewed/2023/01/GHSA-88p8-4vv5-82j7/GHSA-88p8-4vv5-82j7.json +++ b/advisories/github-reviewed/2023/01/GHSA-88p8-4vv5-82j7/GHSA-88p8-4vv5-82j7.json @@ -17,6 +17,11 @@ "ecosystem": "RubyGems", "name": "xaviershay-dm-rails" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -48,7 +53,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-200" ], "severity": "MODERATE", "github_reviewed": true,