diff --git a/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json b/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json index 1eaa3746458..baebf6bbfeb 100644 --- a/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json +++ b/advisories/github-reviewed/2024/12/GHSA-vq94-9pfv-ccqr/GHSA-vq94-9pfv-ccqr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vq94-9pfv-ccqr", - "modified": "2024-12-23T20:56:26Z", + "modified": "2025-02-11T19:06:05Z", "published": "2024-12-23T18:30:47Z", "aliases": [ "CVE-2024-45387" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "affected": [ @@ -61,7 +61,7 @@ "cwe_ids": [ "CWE-89" ], - "severity": "CRITICAL", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-12-23T20:56:26Z", "nvd_published_at": "2024-12-23T16:15:06Z" diff --git a/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json b/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json index f7c486b519f..5df2eed364b 100644 --- a/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json +++ b/advisories/github-reviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fh5r-crhr-qrrq", - "modified": "2025-01-21T20:15:57Z", + "modified": "2025-02-11T19:05:47Z", "published": "2025-01-21T12:30:47Z", "aliases": [ "CVE-2025-23184" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "affected": [ @@ -107,7 +107,7 @@ "cwe_ids": [ "CWE-400" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2025-01-21T20:15:57Z", "nvd_published_at": "2025-01-21T10:15:08Z" diff --git a/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json b/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json index 38c223f7dd6..b8f1cf6d33a 100644 --- a/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json +++ b/advisories/github-reviewed/2025/02/GHSA-79v4-65xg-pq4g/GHSA-79v4-65xg-pq4g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-79v4-65xg-pq4g", - "modified": "2025-02-11T18:06:42Z", + "modified": "2025-02-11T19:06:23Z", "published": "2025-02-11T18:06:42Z", "aliases": [ "CVE-2024-12797" @@ -35,6 +35,22 @@ "type": "WEB", "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12797" + }, + { + "type": "WEB", + "url": "https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9" + }, + { + "type": "WEB", + "url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7" + }, + { + "type": "WEB", + "url": "https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699" + }, { "type": "PACKAGE", "url": "https://github.com/pyca/cryptography" @@ -52,6 +68,6 @@ "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2025-02-11T18:06:42Z", - "nvd_published_at": null + "nvd_published_at": "2025-02-11T16:15:38Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json b/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json index 29ab44eafe0..998209aa624 100644 --- a/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json +++ b/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-wmcc-9vch-jmx4", - "modified": "2025-02-04T18:32:01Z", + "modified": "2025-02-11T19:05:30Z", "published": "2025-02-04T12:30:59Z", "aliases": [ "CVE-2025-23015" ], "summary": "Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions", "details": "Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches.\n\nThis issue affects Apache Cassandra through 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2.\n\nUsers are recommended to upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, 5.0.3, which fixes the issue.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [ { "package": { @@ -130,13 +135,17 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2025/02/03/2" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/02/11/1" } ], "database_specific": { "cwe_ids": [ "CWE-267" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2025-02-04T18:32:00Z", "nvd_published_at": "2025-02-04T10:15:09Z"