From 3d8760f592eee6ac0b9150f6510b36410734ea24 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 22:44:28 +0000 Subject: [PATCH] Publish Advisories GHSA-f8mr-jv2c-v8mg GHSA-5phf-pp7p-vc2r GHSA-q2q7-5pp4-w6pg GHSA-wqvq-5m8c-6g24 --- .../GHSA-f8mr-jv2c-v8mg/GHSA-f8mr-jv2c-v8mg.json | 14 +++++++++++--- .../GHSA-5phf-pp7p-vc2r/GHSA-5phf-pp7p-vc2r.json | 10 +++++++++- .../GHSA-q2q7-5pp4-w6pg/GHSA-q2q7-5pp4-w6pg.json | 10 +++++++--- .../GHSA-wqvq-5m8c-6g24/GHSA-wqvq-5m8c-6g24.json | 10 +++++++++- 4 files changed, 36 insertions(+), 8 deletions(-) diff --git a/advisories/github-reviewed/2020/09/GHSA-f8mr-jv2c-v8mg/GHSA-f8mr-jv2c-v8mg.json b/advisories/github-reviewed/2020/09/GHSA-f8mr-jv2c-v8mg/GHSA-f8mr-jv2c-v8mg.json index b464334dc51..6fd34bfeb6e 100644 --- a/advisories/github-reviewed/2020/09/GHSA-f8mr-jv2c-v8mg/GHSA-f8mr-jv2c-v8mg.json +++ b/advisories/github-reviewed/2020/09/GHSA-f8mr-jv2c-v8mg/GHSA-f8mr-jv2c-v8mg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f8mr-jv2c-v8mg", - "modified": "2021-11-19T15:27:56Z", + "modified": "2024-11-18T22:41:33Z", "published": "2020-09-09T17:29:27Z", "aliases": [ "CVE-2020-15163" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N" } ], "affected": [ @@ -28,7 +32,7 @@ "introduced": "0" }, { - "fixed": "0.12" + "fixed": "0.12.0" } ] } @@ -52,6 +56,10 @@ "type": "WEB", "url": "https://github.com/theupdateframework/tuf/commit/3d342e648fbacdf43a13d7ba8886aaaf07334af7" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-145.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/theupdateframework/tuf" @@ -70,7 +78,7 @@ "CWE-345", "CWE-863" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-09-09T17:27:31Z", "nvd_published_at": "2020-09-09T18:15:00Z" diff --git a/advisories/github-reviewed/2021/03/GHSA-5phf-pp7p-vc2r/GHSA-5phf-pp7p-vc2r.json b/advisories/github-reviewed/2021/03/GHSA-5phf-pp7p-vc2r/GHSA-5phf-pp7p-vc2r.json index 6bbb3c9387b..f07eb7b051f 100644 --- a/advisories/github-reviewed/2021/03/GHSA-5phf-pp7p-vc2r/GHSA-5phf-pp7p-vc2r.json +++ b/advisories/github-reviewed/2021/03/GHSA-5phf-pp7p-vc2r/GHSA-5phf-pp7p-vc2r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5phf-pp7p-vc2r", - "modified": "2024-06-21T22:06:09Z", + "modified": "2024-11-18T22:42:40Z", "published": "2021-03-19T19:42:11Z", "aliases": [ "CVE-2021-28363" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -48,6 +52,10 @@ "type": "WEB", "url": "https://github.com/urllib3/urllib3/commit/8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2021-59.yaml" + }, { "type": "WEB", "url": "https://github.com/pypa/advisory-db/tree/main/vulns/urllib3/PYSEC-2021-59.yaml" diff --git a/advisories/github-reviewed/2021/06/GHSA-q2q7-5pp4-w6pg/GHSA-q2q7-5pp4-w6pg.json b/advisories/github-reviewed/2021/06/GHSA-q2q7-5pp4-w6pg/GHSA-q2q7-5pp4-w6pg.json index e3342b38185..3c0cebff1a8 100644 --- a/advisories/github-reviewed/2021/06/GHSA-q2q7-5pp4-w6pg/GHSA-q2q7-5pp4-w6pg.json +++ b/advisories/github-reviewed/2021/06/GHSA-q2q7-5pp4-w6pg/GHSA-q2q7-5pp4-w6pg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q2q7-5pp4-w6pg", - "modified": "2021-10-21T16:39:49Z", + "modified": "2024-11-18T22:43:15Z", "published": "2021-06-01T21:19:32Z", "aliases": [ "CVE-2021-33503" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -53,8 +57,8 @@ "url": "https://github.com/urllib3/urllib3/commit/5b047b645f5f93900d5e2fc31230848c25eb1f5f#diff-52026d639119bf1e0364836b4e8a18bd9ed3c95c6ba39b26534a5057a65e35bbR65" }, { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-q2q7-5pp4-w6pg" + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2021-108.yaml" }, { "type": "PACKAGE", diff --git a/advisories/github-reviewed/2021/06/GHSA-wqvq-5m8c-6g24/GHSA-wqvq-5m8c-6g24.json b/advisories/github-reviewed/2021/06/GHSA-wqvq-5m8c-6g24/GHSA-wqvq-5m8c-6g24.json index cf9ded3de27..96579c912f8 100644 --- a/advisories/github-reviewed/2021/06/GHSA-wqvq-5m8c-6g24/GHSA-wqvq-5m8c-6g24.json +++ b/advisories/github-reviewed/2021/06/GHSA-wqvq-5m8c-6g24/GHSA-wqvq-5m8c-6g24.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wqvq-5m8c-6g24", - "modified": "2023-09-05T18:05:33Z", + "modified": "2024-11-18T22:42:10Z", "published": "2021-06-18T18:46:43Z", "aliases": [ "CVE-2020-26137" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -52,6 +56,10 @@ "type": "WEB", "url": "https://bugs.python.org/issue39603" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2020-148.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/urllib3/urllib3"