From 2da9c4590aa344b3f073f48ee389c31fa988b3e0 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 30 Oct 2024 19:04:01 +0000
Subject: [PATCH] Publish Advisories

GHSA-5hgc-2vfp-mqvc
GHSA-79jv-5226-783f
GHSA-mgfv-m47x-4wqp
GHSA-pw3x-c5vp-mfc3
GHSA-rrqc-c2jx-6jgv
---
 .../2024/10/GHSA-5hgc-2vfp-mqvc/GHSA-5hgc-2vfp-mqvc.json    | 3 ++-
 .../2024/10/GHSA-79jv-5226-783f/GHSA-79jv-5226-783f.json    | 6 +++++-
 .../2024/10/GHSA-mgfv-m47x-4wqp/GHSA-mgfv-m47x-4wqp.json    | 6 +++++-
 .../2024/10/GHSA-pw3x-c5vp-mfc3/GHSA-pw3x-c5vp-mfc3.json    | 6 +++++-
 .../2024/10/GHSA-rrqc-c2jx-6jgv/GHSA-rrqc-c2jx-6jgv.json    | 3 ++-
 5 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2024/10/GHSA-5hgc-2vfp-mqvc/GHSA-5hgc-2vfp-mqvc.json b/advisories/github-reviewed/2024/10/GHSA-5hgc-2vfp-mqvc/GHSA-5hgc-2vfp-mqvc.json
index 90d7247a47f..d1ddc3c46a4 100644
--- a/advisories/github-reviewed/2024/10/GHSA-5hgc-2vfp-mqvc/GHSA-5hgc-2vfp-mqvc.json
+++ b/advisories/github-reviewed/2024/10/GHSA-5hgc-2vfp-mqvc/GHSA-5hgc-2vfp-mqvc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5hgc-2vfp-mqvc",
-  "modified": "2024-10-09T19:22:14Z",
+  "modified": "2024-10-30T19:03:34Z",
   "published": "2024-10-08T18:33:13Z",
   "aliases": [
     "CVE-2024-45230"
@@ -117,6 +117,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-120",
       "CWE-400"
     ],
     "severity": "MODERATE",
diff --git a/advisories/github-reviewed/2024/10/GHSA-79jv-5226-783f/GHSA-79jv-5226-783f.json b/advisories/github-reviewed/2024/10/GHSA-79jv-5226-783f/GHSA-79jv-5226-783f.json
index 95bf893f58f..cf15339cf6f 100644
--- a/advisories/github-reviewed/2024/10/GHSA-79jv-5226-783f/GHSA-79jv-5226-783f.json
+++ b/advisories/github-reviewed/2024/10/GHSA-79jv-5226-783f/GHSA-79jv-5226-783f.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-79jv-5226-783f",
-  "modified": "2024-10-24T21:46:02Z",
+  "modified": "2024-10-30T19:03:19Z",
   "published": "2024-10-24T18:00:06Z",
   "aliases": [
     "CVE-2024-47880"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
diff --git a/advisories/github-reviewed/2024/10/GHSA-mgfv-m47x-4wqp/GHSA-mgfv-m47x-4wqp.json b/advisories/github-reviewed/2024/10/GHSA-mgfv-m47x-4wqp/GHSA-mgfv-m47x-4wqp.json
index edff72560ab..cedd422f48e 100644
--- a/advisories/github-reviewed/2024/10/GHSA-mgfv-m47x-4wqp/GHSA-mgfv-m47x-4wqp.json
+++ b/advisories/github-reviewed/2024/10/GHSA-mgfv-m47x-4wqp/GHSA-mgfv-m47x-4wqp.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mgfv-m47x-4wqp",
-  "modified": "2024-10-28T15:01:50Z",
+  "modified": "2024-10-30T19:03:27Z",
   "published": "2024-10-26T21:30:47Z",
   "aliases": [
     "CVE-2020-26311"
@@ -9,6 +9,10 @@
   "summary": "useragent Regular Expression Denial of Service vulnerability",
   "details": "Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS).",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green"
diff --git a/advisories/github-reviewed/2024/10/GHSA-pw3x-c5vp-mfc3/GHSA-pw3x-c5vp-mfc3.json b/advisories/github-reviewed/2024/10/GHSA-pw3x-c5vp-mfc3/GHSA-pw3x-c5vp-mfc3.json
index 19c05c5361f..248f7f58f4a 100644
--- a/advisories/github-reviewed/2024/10/GHSA-pw3x-c5vp-mfc3/GHSA-pw3x-c5vp-mfc3.json
+++ b/advisories/github-reviewed/2024/10/GHSA-pw3x-c5vp-mfc3/GHSA-pw3x-c5vp-mfc3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pw3x-c5vp-mfc3",
-  "modified": "2024-10-24T21:45:59Z",
+  "modified": "2024-10-30T19:03:06Z",
   "published": "2024-10-24T17:54:25Z",
   "aliases": [
     "CVE-2024-47878"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
diff --git a/advisories/github-reviewed/2024/10/GHSA-rrqc-c2jx-6jgv/GHSA-rrqc-c2jx-6jgv.json b/advisories/github-reviewed/2024/10/GHSA-rrqc-c2jx-6jgv/GHSA-rrqc-c2jx-6jgv.json
index 037b21e012c..114ec369059 100644
--- a/advisories/github-reviewed/2024/10/GHSA-rrqc-c2jx-6jgv/GHSA-rrqc-c2jx-6jgv.json
+++ b/advisories/github-reviewed/2024/10/GHSA-rrqc-c2jx-6jgv/GHSA-rrqc-c2jx-6jgv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rrqc-c2jx-6jgv",
-  "modified": "2024-10-08T21:17:01Z",
+  "modified": "2024-10-30T19:02:43Z",
   "published": "2024-10-08T18:33:13Z",
   "aliases": [
     "CVE-2024-45231"
@@ -113,6 +113,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-203",
       "CWE-204"
     ],
     "severity": "MODERATE",