diff --git a/advisories/unreviewed/2024/05/GHSA-35pc-8mgp-c76m/GHSA-35pc-8mgp-c76m.json b/advisories/unreviewed/2024/05/GHSA-35pc-8mgp-c76m/GHSA-35pc-8mgp-c76m.json
new file mode 100644
index 00000000000..76305c6a92f
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-35pc-8mgp-c76m/GHSA-35pc-8mgp-c76m.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-35pc-8mgp-c76m",
+  "modified": "2024-05-31T15:30:37Z",
+  "published": "2024-05-31T15:30:37Z",
+  "aliases": [
+    "CVE-2024-31908"
+  ],
+  "details": "IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  289890.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31908"
+    },
+    {
+      "type": "WEB",
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/289890"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7151122"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-31T13:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-7735-w2jp-gvg6/GHSA-7735-w2jp-gvg6.json b/advisories/unreviewed/2024/05/GHSA-7735-w2jp-gvg6/GHSA-7735-w2jp-gvg6.json
new file mode 100644
index 00000000000..eddb60ec14c
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-7735-w2jp-gvg6/GHSA-7735-w2jp-gvg6.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7735-w2jp-gvg6",
+  "modified": "2024-05-31T15:30:37Z",
+  "published": "2024-05-31T15:30:37Z",
+  "aliases": [
+    "CVE-2024-5565"
+  ],
+  "details": "The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to the library’s “ask” method with \"visualize\" set to True (default behavior) leads to remote code execution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5565"
+    },
+    {
+      "type": "WEB",
+      "url": "https://research.jfrog.com/vulnerabilities/vanna-prompt-injection-rce-jfsa-2024-001034449"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-31T15:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-c4fg-8455-4r6v/GHSA-c4fg-8455-4r6v.json b/advisories/unreviewed/2024/05/GHSA-c4fg-8455-4r6v/GHSA-c4fg-8455-4r6v.json
new file mode 100644
index 00000000000..d52124d0798
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-c4fg-8455-4r6v/GHSA-c4fg-8455-4r6v.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c4fg-8455-4r6v",
+  "modified": "2024-05-31T15:30:37Z",
+  "published": "2024-05-31T15:30:37Z",
+  "aliases": [
+    "CVE-2024-31889"
+  ],
+  "details": "IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  288136.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31889"
+    },
+    {
+      "type": "WEB",
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/288136"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7151122"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-31T13:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-c8qj-jvph-xj8w/GHSA-c8qj-jvph-xj8w.json b/advisories/unreviewed/2024/05/GHSA-c8qj-jvph-xj8w/GHSA-c8qj-jvph-xj8w.json
new file mode 100644
index 00000000000..506856834df
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-c8qj-jvph-xj8w/GHSA-c8qj-jvph-xj8w.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c8qj-jvph-xj8w",
+  "modified": "2024-05-31T15:30:37Z",
+  "published": "2024-05-31T15:30:37Z",
+  "aliases": [
+    "CVE-2023-7073"
+  ],
+  "details": "The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.0 via the upload_to_library AJAX action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7073"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/auto-post-thumbnail/tags/3.9.18/includes/class-apt.php#L947"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/dc024183-0244-4ef9-9171-057ecd1c3e1d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-31T15:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-hwqw-qqjm-38q9/GHSA-hwqw-qqjm-38q9.json b/advisories/unreviewed/2024/05/GHSA-hwqw-qqjm-38q9/GHSA-hwqw-qqjm-38q9.json
new file mode 100644
index 00000000000..817711c2ed3
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-hwqw-qqjm-38q9/GHSA-hwqw-qqjm-38q9.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hwqw-qqjm-38q9",
+  "modified": "2024-05-31T15:30:37Z",
+  "published": "2024-05-31T15:30:37Z",
+  "aliases": [
+    "CVE-2024-31907"
+  ],
+  "details": "IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  289889.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31907"
+    },
+    {
+      "type": "WEB",
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/289889"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7151122"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-31T13:15:09Z"
+  }
+}
\ No newline at end of file