diff --git a/advisories/github-reviewed/2020/08/GHSA-2828-9vh6-9m6j/GHSA-2828-9vh6-9m6j.json b/advisories/github-reviewed/2020/08/GHSA-2828-9vh6-9m6j/GHSA-2828-9vh6-9m6j.json index b2e8ef95bbe..f6f97a375d5 100644 --- a/advisories/github-reviewed/2020/08/GHSA-2828-9vh6-9m6j/GHSA-2828-9vh6-9m6j.json +++ b/advisories/github-reviewed/2020/08/GHSA-2828-9vh6-9m6j/GHSA-2828-9vh6-9m6j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2828-9vh6-9m6j", - "modified": "2024-11-18T22:38:24Z", + "modified": "2024-11-18T22:40:00Z", "published": "2020-08-21T16:25:48Z", "aliases": [ "CVE-2020-6173" @@ -52,14 +52,6 @@ "type": "WEB", "url": "https://github.com/theupdateframework/tuf/issues/973" }, - { - "type": "WEB", - "url": "https://github.com/theupdateframework/python-tuf/pull/974" - }, - { - "type": "WEB", - "url": "https://github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0e" - }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-146.yaml" diff --git a/advisories/github-reviewed/2020/08/GHSA-pwqf-9h7j-7mv8/GHSA-pwqf-9h7j-7mv8.json b/advisories/github-reviewed/2020/08/GHSA-pwqf-9h7j-7mv8/GHSA-pwqf-9h7j-7mv8.json index fba699246d4..c00dc5219ae 100644 --- a/advisories/github-reviewed/2020/08/GHSA-pwqf-9h7j-7mv8/GHSA-pwqf-9h7j-7mv8.json +++ b/advisories/github-reviewed/2020/08/GHSA-pwqf-9h7j-7mv8/GHSA-pwqf-9h7j-7mv8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pwqf-9h7j-7mv8", - "modified": "2021-09-23T19:05:25Z", + "modified": "2024-11-18T22:40:36Z", "published": "2020-08-21T16:25:26Z", "aliases": [ "CVE-2020-6174" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,11 +24,6 @@ "ecosystem": "PyPI", "name": "tuf" }, - "ecosystem_specific": { - "affected_functions": [ - "tuf.sig.verify" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -55,15 +54,19 @@ }, { "type": "WEB", - "url": "https://github.com/theupdateframework/tuf/pull/974/commits/a0397c7c820ec1c30ebc793cc9469b61c8d3f50e" + "url": "https://github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0e" }, { "type": "WEB", - "url": "https://github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0e" + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-147.yaml" }, { "type": "PACKAGE", "url": "https://github.com/theupdateframework/tuf" + }, + { + "type": "WEB", + "url": "https://github.com/theupdateframework/tuf/releases/tag/v0.12.2" } ], "database_specific": {