From 2f7737ca73fbb74d7843ff3af82e948c0f8f53bf Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 28 Oct 2024 14:29:40 +0000 Subject: [PATCH] Publish Advisories GHSA-mfg7-x5m7-6p8w GHSA-qx2v-j445-g354 GHSA-x7c8-4x3h-874w GHSA-5w5m-pfw9-c8fp GHSA-jqhc-m2j3-fjrx --- .../GHSA-mfg7-x5m7-6p8w.json | 20 +++++++++++++++++-- .../GHSA-qx2v-j445-g354.json | 18 ++++++++++++++++- .../GHSA-x7c8-4x3h-874w.json | 14 ++++++++++++- .../GHSA-5w5m-pfw9-c8fp.json | 6 +++++- .../GHSA-jqhc-m2j3-fjrx.json | 6 +++++- 5 files changed, 58 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json b/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json index 2df4c51dcc4..f38a926e4b4 100644 --- a/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json +++ b/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mfg7-x5m7-6p8w", - "modified": "2024-08-26T19:04:36Z", + "modified": "2024-10-28T14:27:38Z", "published": "2019-04-30T15:37:17Z", "aliases": [ "CVE-2019-9635" @@ -67,6 +67,22 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/e41cb124cd0b325821af85cdacd9d8a12e206418" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-mfg7-x5m7-6p8w" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-228.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-235.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-210.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/tensorflow/tensorflow" @@ -80,7 +96,7 @@ "cwe_ids": [ "CWE-476" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2019-04-30T15:16:24Z", "nvd_published_at": "2019-04-24T17:29:00Z" diff --git a/advisories/github-reviewed/2019/04/GHSA-qx2v-j445-g354/GHSA-qx2v-j445-g354.json b/advisories/github-reviewed/2019/04/GHSA-qx2v-j445-g354/GHSA-qx2v-j445-g354.json index 3ef96ac786d..1f56fe50533 100644 --- a/advisories/github-reviewed/2019/04/GHSA-qx2v-j445-g354/GHSA-qx2v-j445-g354.json +++ b/advisories/github-reviewed/2019/04/GHSA-qx2v-j445-g354/GHSA-qx2v-j445-g354.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qx2v-j445-g354", - "modified": "2024-08-26T16:17:20Z", + "modified": "2024-10-28T14:27:27Z", "published": "2019-04-30T15:37:34Z", "aliases": [ "CVE-2018-7577" @@ -67,6 +67,22 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/dfa9921e6343727b05f42f8d4a918b19528ff994" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-qx2v-j445-g354" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-225.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-232.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-207.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/tensorflow/tensorflow" diff --git a/advisories/github-reviewed/2022/05/GHSA-x7c8-4x3h-874w/GHSA-x7c8-4x3h-874w.json b/advisories/github-reviewed/2022/05/GHSA-x7c8-4x3h-874w/GHSA-x7c8-4x3h-874w.json index 9bb657bb20b..b1cace66a65 100644 --- a/advisories/github-reviewed/2022/05/GHSA-x7c8-4x3h-874w/GHSA-x7c8-4x3h-874w.json +++ b/advisories/github-reviewed/2022/05/GHSA-x7c8-4x3h-874w/GHSA-x7c8-4x3h-874w.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-x7c8-4x3h-874w", - "modified": "2022-07-01T21:43:13Z", + "modified": "2024-10-28T14:26:55Z", "published": "2022-05-13T01:42:26Z", "aliases": [ "CVE-2017-11610" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -125,6 +129,14 @@ "type": "WEB", "url": "https://github.com/Supervisor/supervisor/blob/3.3.3/CHANGES.txt" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-x7c8-4x3h-874w" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/supervisor/PYSEC-2017-41.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMSCGMM477N64Z3BM34RWYBGSLK466B" diff --git a/advisories/github-reviewed/2023/06/GHSA-5w5m-pfw9-c8fp/GHSA-5w5m-pfw9-c8fp.json b/advisories/github-reviewed/2023/06/GHSA-5w5m-pfw9-c8fp/GHSA-5w5m-pfw9-c8fp.json index 21da5602098..aacecceaeb2 100644 --- a/advisories/github-reviewed/2023/06/GHSA-5w5m-pfw9-c8fp/GHSA-5w5m-pfw9-c8fp.json +++ b/advisories/github-reviewed/2023/06/GHSA-5w5m-pfw9-c8fp/GHSA-5w5m-pfw9-c8fp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5w5m-pfw9-c8fp", - "modified": "2023-06-16T22:09:31Z", + "modified": "2024-10-28T14:29:10Z", "published": "2023-06-09T22:53:14Z", "aliases": [ "CVE-2023-34233" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ diff --git a/advisories/github-reviewed/2023/07/GHSA-jqhc-m2j3-fjrx/GHSA-jqhc-m2j3-fjrx.json b/advisories/github-reviewed/2023/07/GHSA-jqhc-m2j3-fjrx/GHSA-jqhc-m2j3-fjrx.json index 152e46f2b19..04ecb91ada5 100644 --- a/advisories/github-reviewed/2023/07/GHSA-jqhc-m2j3-fjrx/GHSA-jqhc-m2j3-fjrx.json +++ b/advisories/github-reviewed/2023/07/GHSA-jqhc-m2j3-fjrx/GHSA-jqhc-m2j3-fjrx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jqhc-m2j3-fjrx", - "modified": "2023-07-06T21:06:29Z", + "modified": "2024-10-28T14:28:41Z", "published": "2023-07-06T21:05:43Z", "aliases": [ "CVE-2023-36830" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L" } ], "affected": [