From 3b4d589e88262b24798fb5c5ab42f7e43f7e0a72 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 24 Sep 2024 15:37:02 +0000 Subject: [PATCH] Publish Advisories GHSA-v936-j8gp-9q3p GHSA-3x4c-pq33-4w3q --- .../02/GHSA-v936-j8gp-9q3p/GHSA-v936-j8gp-9q3p.json | 12 ++++++++++-- .../09/GHSA-3x4c-pq33-4w3q/GHSA-3x4c-pq33-4w3q.json | 6 +++++- 2 files changed, 15 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2021/02/GHSA-v936-j8gp-9q3p/GHSA-v936-j8gp-9q3p.json b/advisories/github-reviewed/2021/02/GHSA-v936-j8gp-9q3p/GHSA-v936-j8gp-9q3p.json index ffbeb144767..3e5188b8b5c 100644 --- a/advisories/github-reviewed/2021/02/GHSA-v936-j8gp-9q3p/GHSA-v936-j8gp-9q3p.json +++ b/advisories/github-reviewed/2021/02/GHSA-v936-j8gp-9q3p/GHSA-v936-j8gp-9q3p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-v936-j8gp-9q3p", - "modified": "2021-08-31T21:06:25Z", + "modified": "2024-09-24T15:35:29Z", "published": "2021-02-26T17:28:34Z", "aliases": [ "CVE-2021-21273" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -60,6 +64,10 @@ "type": "WEB", "url": "https://github.com/matrix-org/synapse/releases/tag/v1.25.0" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2021-131.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY" @@ -69,7 +77,7 @@ "cwe_ids": [ "CWE-601" ], - "severity": "LOW", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-02-26T17:26:48Z", "nvd_published_at": "2021-02-26T18:15:00Z" diff --git a/advisories/github-reviewed/2021/09/GHSA-3x4c-pq33-4w3q/GHSA-3x4c-pq33-4w3q.json b/advisories/github-reviewed/2021/09/GHSA-3x4c-pq33-4w3q/GHSA-3x4c-pq33-4w3q.json index 4e0caf3f2c5..d13069d1649 100644 --- a/advisories/github-reviewed/2021/09/GHSA-3x4c-pq33-4w3q/GHSA-3x4c-pq33-4w3q.json +++ b/advisories/github-reviewed/2021/09/GHSA-3x4c-pq33-4w3q/GHSA-3x4c-pq33-4w3q.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3x4c-pq33-4w3q", - "modified": "2021-08-31T19:13:32Z", + "modified": "2024-09-24T15:36:22Z", "published": "2021-09-01T18:25:27Z", "aliases": [ "CVE-2021-39164" @@ -56,6 +56,10 @@ "type": "WEB", "url": "https://github.com/matrix-org/synapse/releases/tag/v1.41.1" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2021-425.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2VHDEPCZ22GJFMZCWA2XZAGPOEV72POF"