Publish Advisories

GHSA-3gg8-mc87-cq3h
GHSA-5hcr-g32p-h74c

advisories/github-reviewed/2024/04/GHSA-3gg8-mc87-cq3h/GHSA-3gg8-mc87-cq3h.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3gg8-mc87-cq3h",
-  "modified": "2024-05-02T19:00:51Z",
+  "modified": "2024-07-03T20:40:29Z",
   "published": "2024-04-21T18:30:36Z",
   "aliases": [
     "CVE-2024-29733"
@@ -9,7 +9,10 @@
   "summary": "Improper Certificate Validation vulnerability in Apache Airflow FTP Provider",
   "details": "Improper Certificate Validation vulnerability in Apache Airflow FTP Provider.\n\nThe FTP hook lacks complete certificate validation in FTP_TLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.create_default_context() during FTP_TLS instantiation is used as mitigation to validate the certificates properly.\n\nThis issue affects Apache Airflow FTP Provider: before 3.7.0.\n\nUsers are recommended to upgrade to version 3.7.0, which fixes the issue.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"
+    }
   ],
   "affected": [
     {
@@ -66,7 +69,7 @@
     "cwe_ids": [
       "CWE-295"
     ],
-    "severity": "MODERATE",
+    "severity": "LOW",
     "github_reviewed": true,
     "github_reviewed_at": "2024-04-24T19:52:02Z",
     "nvd_published_at": "2024-04-21T18:15:45Z"

advisories/github-reviewed/2024/04/GHSA-5hcr-g32p-h74c/GHSA-5hcr-g32p-h74c.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5hcr-g32p-h74c",
-  "modified": "2024-04-30T08:25:50Z",
+  "modified": "2024-07-03T20:40:53Z",
   "published": "2024-04-27T00:30:37Z",
   "aliases": [
     "CVE-2024-31828"
@@ -9,7 +9,10 @@
   "summary": "Lavalite CMS Cross Site Scripting vulnerability",
   "details": "Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
@@ -38,7 +41,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,