diff --git a/advisories/github-reviewed/2021/05/GHSA-5jqp-qgf6-3pvh/GHSA-5jqp-qgf6-3pvh.json b/advisories/github-reviewed/2021/05/GHSA-5jqp-qgf6-3pvh/GHSA-5jqp-qgf6-3pvh.json index 9de740f5326..f27b4fc82e7 100644 --- a/advisories/github-reviewed/2021/05/GHSA-5jqp-qgf6-3pvh/GHSA-5jqp-qgf6-3pvh.json +++ b/advisories/github-reviewed/2021/05/GHSA-5jqp-qgf6-3pvh/GHSA-5jqp-qgf6-3pvh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5jqp-qgf6-3pvh", - "modified": "2021-05-13T18:54:35Z", + "modified": "2024-10-21T20:16:10Z", "published": "2021-05-13T20:23:17Z", "aliases": [ "CVE-2021-29510" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,17 +24,31 @@ "ecosystem": "PyPI", "name": "pydantic" }, - "ecosystem_specific": { - "affected_functions": [ - "pydantic.datetime_parse.from_unix_seconds" - ] + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.6.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "pydantic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "1.8.0" + "introduced": "1.8" }, { "fixed": "1.8.2" @@ -44,17 +62,12 @@ "ecosystem": "PyPI", "name": "pydantic" }, - "ecosystem_specific": { - "affected_functions": [ - "pydantic.datetime_parse.from_unix_seconds" - ] - }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "1.7.0" + "introduced": "1.7" }, { "fixed": "1.7.4" @@ -62,30 +75,6 @@ ] } ] - }, - { - "package": { - "ecosystem": "PyPI", - "name": "pydantic" - }, - "ecosystem_specific": { - "affected_functions": [ - "pydantic.datetime_parse.from_unix_seconds" - ] - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "fixed": "1.6.2" - } - ] - } - ] } ], "references": [ @@ -113,6 +102,10 @@ "type": "WEB", "url": "https://github.com/samuelcolvin/pydantic/commit/7e83fdd2563ffac081db7ecdf1affa65ef38c468" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pydantic/PYSEC-2021-47.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2HT266L6Q7H6ICP7DFGXOGBJHNNKMKB" @@ -130,7 +123,7 @@ "cwe_ids": [ "CWE-835" ], - "severity": "LOW", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-05-13T18:54:35Z", "nvd_published_at": "2021-05-13T19:15:00Z"