Publish Advisories

GHSA-2828-9vh6-9m6j
GHSA-pwqf-9h7j-7mv8
This commit is contained in:
advisory-database[bot]
2024-11-18 22:41:57 +00:00
parent c0305af09c
commit 342e4bcea8
2 changed files with 12 additions and 17 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2828-9vh6-9m6j",
"modified": "2024-11-18T22:38:24Z",
"modified": "2024-11-18T22:40:00Z",
"published": "2020-08-21T16:25:48Z",
"aliases": [
"CVE-2020-6173"
@@ -52,14 +52,6 @@
"type": "WEB",
"url": "https://github.com/theupdateframework/tuf/issues/973"
},
{
"type": "WEB",
"url": "https://github.com/theupdateframework/python-tuf/pull/974"
},
{
"type": "WEB",
"url": "https://github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0e"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-146.yaml"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pwqf-9h7j-7mv8",
"modified": "2021-09-23T19:05:25Z",
"modified": "2024-11-18T22:40:36Z",
"published": "2020-08-21T16:25:26Z",
"aliases": [
"CVE-2020-6174"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -20,11 +24,6 @@
"ecosystem": "PyPI",
"name": "tuf"
},
"ecosystem_specific": {
"affected_functions": [
"tuf.sig.verify"
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -55,15 +54,19 @@
},
{
"type": "WEB",
"url": "https://github.com/theupdateframework/tuf/pull/974/commits/a0397c7c820ec1c30ebc793cc9469b61c8d3f50e"
"url": "https://github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0e"
},
{
"type": "WEB",
"url": "https://github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0e"
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-147.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/theupdateframework/tuf"
},
{
"type": "WEB",
"url": "https://github.com/theupdateframework/tuf/releases/tag/v0.12.2"
}
],
"database_specific": {