From 2984084c7f6bc3d11abe4c64f8e4518f770e24da Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 30 Sep 2024 20:44:31 +0000 Subject: [PATCH] Publish Advisories GHSA-9jhm-8m8c-c3f4 GHSA-jrh7-mhhx-6h88 GHSA-x345-32rc-8h85 GHSA-4f74-84v3-j9q5 --- .../GHSA-9jhm-8m8c-c3f4.json | 16 ++++++++++++++-- .../GHSA-jrh7-mhhx-6h88.json | 18 +++++++++++++++++- .../GHSA-x345-32rc-8h85.json | 12 ++++++++++-- .../GHSA-4f74-84v3-j9q5.json | 6 +++++- 4 files changed, 46 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2021/04/GHSA-9jhm-8m8c-c3f4/GHSA-9jhm-8m8c-c3f4.json b/advisories/github-reviewed/2021/04/GHSA-9jhm-8m8c-c3f4/GHSA-9jhm-8m8c-c3f4.json index 01c0bc4c58e..06e9835c370 100644 --- a/advisories/github-reviewed/2021/04/GHSA-9jhm-8m8c-c3f4/GHSA-9jhm-8m8c-c3f4.json +++ b/advisories/github-reviewed/2021/04/GHSA-9jhm-8m8c-c3f4/GHSA-9jhm-8m8c-c3f4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9jhm-8m8c-c3f4", - "modified": "2021-04-15T21:00:29Z", + "modified": "2024-09-30T20:40:49Z", "published": "2021-04-19T14:54:15Z", "aliases": [ "CVE-2021-29431" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N" } ], "affected": [ @@ -60,10 +64,18 @@ "type": "WEB", "url": "https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f" }, + { + "type": "PACKAGE", + "url": "https://github.com/matrix-org/sydent" + }, { "type": "WEB", "url": "https://github.com/matrix-org/sydent/releases/tag/v2.3.0" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-22.yaml" + }, { "type": "WEB", "url": "https://pypi.org/project/matrix-sydent" @@ -74,7 +86,7 @@ "CWE-20", "CWE-918" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-04-15T21:00:29Z", "nvd_published_at": "2021-04-15T21:15:00Z" diff --git a/advisories/github-reviewed/2021/04/GHSA-jrh7-mhhx-6h88/GHSA-jrh7-mhhx-6h88.json b/advisories/github-reviewed/2021/04/GHSA-jrh7-mhhx-6h88/GHSA-jrh7-mhhx-6h88.json index a195b0877bf..e6c5835f967 100644 --- a/advisories/github-reviewed/2021/04/GHSA-jrh7-mhhx-6h88/GHSA-jrh7-mhhx-6h88.json +++ b/advisories/github-reviewed/2021/04/GHSA-jrh7-mhhx-6h88/GHSA-jrh7-mhhx-6h88.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jrh7-mhhx-6h88", - "modified": "2021-08-31T21:07:44Z", + "modified": "2024-09-30T20:39:15Z", "published": "2021-04-13T15:12:40Z", "aliases": [ "CVE-2021-21393" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -52,10 +56,22 @@ "type": "WEB", "url": "https://github.com/matrix-org/synapse/pull/9393" }, + { + "type": "WEB", + "url": "https://github.com/matrix-org/synapse/commit/3f58fc848d0002de4605bed91603a1f9f245d128" + }, + { + "type": "WEB", + "url": "https://github.com/matrix-org/synapse/commit/d2f0ec12d5c8f113095408888e87e191ac546499" + }, { "type": "PACKAGE", "url": "https://github.com/matrix-org/synapse" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2021-26.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY" diff --git a/advisories/github-reviewed/2021/05/GHSA-x345-32rc-8h85/GHSA-x345-32rc-8h85.json b/advisories/github-reviewed/2021/05/GHSA-x345-32rc-8h85/GHSA-x345-32rc-8h85.json index d22fc9f78ae..676704cd02e 100644 --- a/advisories/github-reviewed/2021/05/GHSA-x345-32rc-8h85/GHSA-x345-32rc-8h85.json +++ b/advisories/github-reviewed/2021/05/GHSA-x345-32rc-8h85/GHSA-x345-32rc-8h85.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-x345-32rc-8h85", - "modified": "2021-08-31T21:04:17Z", + "modified": "2024-09-30T20:43:40Z", "published": "2021-05-13T20:22:51Z", "aliases": [ "CVE-2021-29471" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ @@ -56,6 +60,10 @@ "type": "WEB", "url": "https://github.com/matrix-org/synapse/releases/tag/v1.33.2" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2021-135.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY" @@ -66,7 +74,7 @@ "CWE-331", "CWE-400" ], - "severity": "LOW", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-05-11T17:19:15Z", "nvd_published_at": "2021-05-11T15:15:00Z" diff --git a/advisories/github-reviewed/2023/09/GHSA-4f74-84v3-j9q5/GHSA-4f74-84v3-j9q5.json b/advisories/github-reviewed/2023/09/GHSA-4f74-84v3-j9q5/GHSA-4f74-84v3-j9q5.json index b455ae5267e..bb0dfcc2d57 100644 --- a/advisories/github-reviewed/2023/09/GHSA-4f74-84v3-j9q5/GHSA-4f74-84v3-j9q5.json +++ b/advisories/github-reviewed/2023/09/GHSA-4f74-84v3-j9q5/GHSA-4f74-84v3-j9q5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4f74-84v3-j9q5", - "modified": "2024-01-08T15:36:14Z", + "modified": "2024-09-30T20:42:56Z", "published": "2023-09-26T18:55:24Z", "aliases": [ "CVE-2023-41335" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" } ], "affected": [