Publish Advisories

GHSA-v5h6-c2hv-hv3r
GHSA-grv7-fg5c-xmjg
GHSA-xfjj-f699-rc79

advisories/github-reviewed/2024/03/GHSA-v5h6-c2hv-hv3r/GHSA-v5h6-c2hv-hv3r.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v5h6-c2hv-hv3r",
-  "modified": "2024-05-14T18:14:34Z",
+  "modified": "2024-07-05T21:26:19Z",
   "published": "2024-03-25T19:36:52Z",
   "aliases": [
     "CVE-2024-27280"
@@ -9,7 +9,10 @@
   "summary": "StringIO buffer overread vulnerability",
   "details": "An issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4.\n\nThe `ungetbyte` and `ungetc` methods on a StringIO can read past the end of a string, and a subsequent call to `StringIO.gets` may return the memory value.\n\nThis vulnerability is not affected StringIO 3.0.3 and later, and Ruby 3.2.x and later.\n\nWe recommend to update the StringIO gem to version 3.0.3 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:\n\n* For Ruby 3.0 users: Update to `stringio` 3.0.1.1\n* For Ruby 3.1 users: Update to `stringio` 3.1.0.2\n\nYou can use `gem update stringio` to update it. If you are using bundler, please add `gem \"stringio\", \">= 3.0.1.2\"` to your `Gemfile`.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -45,6 +48,10 @@
       "type": "WEB",
       "url": "https://github.com/ruby/stringio/commit/c58c5f54f1eab99665ea6a161d29ff6a7490afc8"
     },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/1399856"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/ruby/stringio"
@@ -60,9 +67,10 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-120",
       "CWE-126"
     ],
-    "severity": "HIGH",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2024-03-25T19:36:52Z",
     "nvd_published_at": "2024-05-14T15:11:56Z"

advisories/github-reviewed/2024/05/GHSA-grv7-fg5c-xmjg/GHSA-grv7-fg5c-xmjg.json

@@ -71,7 +71,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1050"
+      "CWE-1050",
+      "CWE-400"
     ],
     "severity": "HIGH",
     "github_reviewed": true,

advisories/github-reviewed/2024/05/GHSA-xfjj-f699-rc79/GHSA-xfjj-f699-rc79.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xfjj-f699-rc79",
-  "modified": "2024-05-09T18:36:26Z",
+  "modified": "2024-07-05T21:26:52Z",
   "published": "2024-05-07T15:30:37Z",
   "aliases": [
     "CVE-2024-33434"
@@ -9,7 +9,10 @@
   "summary": "tiagorlampert CHAOS vulnerable to arbitrary code execution",
   "details": "An issue in tiagorlampert CHAOS before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the `filename` argument into the `buildStr` string without any sanitization or filtering.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -64,9 +67,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-78"
     ],
-    "severity": "MODERATE",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2024-05-07T16:53:55Z",
     "nvd_published_at": "2024-05-07T14:15:10Z"