diff --git a/advisories/github-reviewed/2020/02/GHSA-hmr4-m2h5-33qx/GHSA-hmr4-m2h5-33qx.json b/advisories/github-reviewed/2020/02/GHSA-hmr4-m2h5-33qx/GHSA-hmr4-m2h5-33qx.json index 8a63686d94c..80e4a4a98c6 100644 --- a/advisories/github-reviewed/2020/02/GHSA-hmr4-m2h5-33qx/GHSA-hmr4-m2h5-33qx.json +++ b/advisories/github-reviewed/2020/02/GHSA-hmr4-m2h5-33qx/GHSA-hmr4-m2h5-33qx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hmr4-m2h5-33qx", - "modified": "2022-03-21T20:34:24Z", + "modified": "2024-09-20T15:03:11Z", "published": "2020-02-11T21:03:20Z", "aliases": [ "CVE-2020-7471" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ecosystem_specific": { "affected_functions": [ @@ -42,7 +46,7 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ecosystem_specific": { "affected_functions": [ @@ -54,7 +58,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.0.0" + "introduced": "2.0" }, { "fixed": "2.2.10" @@ -66,7 +70,7 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ecosystem_specific": { "affected_functions": [ @@ -78,7 +82,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "3.0.0" + "introduced": "3.0" }, { "fixed": "3.0.3" @@ -109,37 +113,9 @@ "type": "WEB", "url": "https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136" }, - { - "type": "PACKAGE", - "url": "https://github.com/django/django" - }, { "type": "WEB", - "url": "https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ" - }, - { - "type": "WEB", - "url": "https://seclists.org/bugtraq/2020/Feb/30" - }, - { - "type": "WEB", - "url": "https://security.gentoo.org/glsa/202004-17" - }, - { - "type": "WEB", - "url": "https://security.netapp.com/advisory/ntap-20200221-0006" - }, - { - "type": "WEB", - "url": "https://usn.ubuntu.com/4264-1" - }, - { - "type": "WEB", - "url": "https://www.debian.org/security/2020/dsa-4629" + "url": "https://www.openwall.com/lists/oss-security/2020/02/03/1" }, { "type": "WEB", @@ -147,7 +123,47 @@ }, { "type": "WEB", - "url": "https://www.openwall.com/lists/oss-security/2020/02/03/1" + "url": "https://www.debian.org/security/2020/dsa-4629" + }, + { + "type": "WEB", + "url": "https://usn.ubuntu.com/4264-1" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20200221-0006" + }, + { + "type": "WEB", + "url": "https://security.gentoo.org/glsa/202004-17" + }, + { + "type": "WEB", + "url": "https://seclists.org/bugtraq/2020/Feb/30" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ" + }, + { + "type": "WEB", + "url": "https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-35.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/django/django" + }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-hmr4-m2h5-33qx" + }, + { + "type": "WEB", + "url": "https://docs.djangoproject.com/en/3.0/releases/security" }, { "type": "WEB", diff --git a/advisories/github-reviewed/2020/06/GHSA-3gh2-xw74-jmcw/GHSA-3gh2-xw74-jmcw.json b/advisories/github-reviewed/2020/06/GHSA-3gh2-xw74-jmcw/GHSA-3gh2-xw74-jmcw.json index 9998d6f7512..e8cce36b897 100644 --- a/advisories/github-reviewed/2020/06/GHSA-3gh2-xw74-jmcw/GHSA-3gh2-xw74-jmcw.json +++ b/advisories/github-reviewed/2020/06/GHSA-3gh2-xw74-jmcw/GHSA-3gh2-xw74-jmcw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3gh2-xw74-jmcw", - "modified": "2024-04-01T18:27:28Z", + "modified": "2024-09-20T15:03:44Z", "published": "2020-06-05T14:52:07Z", "aliases": [ "CVE-2020-9402" @@ -12,20 +12,24 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "1.11.0" + "introduced": "1.11" }, { "fixed": "1.11.29" @@ -37,14 +41,14 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "2.2.0" + "introduced": "2.2" }, { "fixed": "2.2.11" @@ -56,14 +60,14 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "3.0.0" + "introduced": "3.0" }, { "fixed": "3.0.4" @@ -86,10 +90,18 @@ "type": "WEB", "url": "https://docs.djangoproject.com/en/3.0/releases/security" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-3gh2-xw74-jmcw" + }, { "type": "PACKAGE", "url": "https://github.com/django/django" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-36.yaml" + }, { "type": "WEB", "url": "https://groups.google.com/forum/#!topic/django-announce/fLUh_pOaKrY"