Publish Advisories

GHSA-5crp-9r3c-p9vr
GHSA-7xg2-83f8-39mr
GHSA-8rfx-6mr3-5jh3

advisories/github-reviewed/2024/01/GHSA-8rfx-6mr3-5jh3/GHSA-8rfx-6mr3-5jh3.json

@@ -1,17 +1,37 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8rfx-6mr3-5jh3",
-  "modified": "2024-01-03T18:30:51Z",
+  "modified": "2024-01-03T20:06:13Z",
   "published": "2024-01-03T18:30:51Z",
+  "withdrawn": "2024-01-03T20:06:13Z",
   "aliases": [
-    "CVE-2024-21907"
+
   ],
-  "details": "Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.\n",
+  "summary": "Duplicate Advisory: Improper Handling of Exceptional Conditions in Newtonsoft.Json",
+  "details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-5crp-9r3c-p9vr. This link is maintained to preserve external references.\n\n### Original Description\nNewtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.\n",
   "severity": [
 
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "NuGet",
+        "name": "Newtonsoft.Json"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "13.0.1"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -55,9 +75,9 @@
     "cwe_ids": [
       "CWE-755"
     ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-03T20:06:13Z",
     "nvd_published_at": "2024-01-03T16:15:08Z"
   }
 }