Publish Advisories

GHSA-hmr4-m2h5-33qx
GHSA-3gh2-xw74-jmcw
This commit is contained in:
advisory-database[bot]
2024-09-20 15:05:20 +00:00
parent df75f36035
commit 33c164c1d6
2 changed files with 71 additions and 43 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hmr4-m2h5-33qx",
"modified": "2022-03-21T20:34:24Z",
"modified": "2024-09-20T15:03:11Z",
"published": "2020-02-11T21:03:20Z",
"aliases": [
"CVE-2020-7471"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ecosystem_specific": {
"affected_functions": [
@@ -42,7 +46,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ecosystem_specific": {
"affected_functions": [
@@ -54,7 +58,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
"introduced": "2.0"
},
{
"fixed": "2.2.10"
@@ -66,7 +70,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ecosystem_specific": {
"affected_functions": [
@@ -78,7 +82,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
"introduced": "3.0"
},
{
"fixed": "3.0.3"
@@ -109,37 +113,9 @@
"type": "WEB",
"url": "https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136"
},
{
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ"
},
{
"type": "WEB",
"url": "https://seclists.org/bugtraq/2020/Feb/30"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202004-17"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20200221-0006"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4264-1"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2020/dsa-4629"
"url": "https://www.openwall.com/lists/oss-security/2020/02/03/1"
},
{
"type": "WEB",
@@ -147,7 +123,47 @@
},
{
"type": "WEB",
"url": "https://www.openwall.com/lists/oss-security/2020/02/03/1"
"url": "https://www.debian.org/security/2020/dsa-4629"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4264-1"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20200221-0006"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202004-17"
},
{
"type": "WEB",
"url": "https://seclists.org/bugtraq/2020/Feb/30"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-35.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-hmr4-m2h5-33qx"
},
{
"type": "WEB",
"url": "https://docs.djangoproject.com/en/3.0/releases/security"
},
{
"type": "WEB",
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3gh2-xw74-jmcw",
"modified": "2024-04-01T18:27:28Z",
"modified": "2024-09-20T15:03:44Z",
"published": "2020-06-05T14:52:07Z",
"aliases": [
"CVE-2020-9402"
@@ -12,20 +12,24 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.11.0"
"introduced": "1.11"
},
{
"fixed": "1.11.29"
@@ -37,14 +41,14 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.2.0"
"introduced": "2.2"
},
{
"fixed": "2.2.11"
@@ -56,14 +60,14 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.0.0"
"introduced": "3.0"
},
{
"fixed": "3.0.4"
@@ -86,10 +90,18 @@
"type": "WEB",
"url": "https://docs.djangoproject.com/en/3.0/releases/security"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-3gh2-xw74-jmcw"
},
{
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-36.yaml"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/django-announce/fLUh_pOaKrY"