diff --git a/advisories/unreviewed/2025/03/GHSA-cj47-qj6g-x7r4/GHSA-cj47-qj6g-x7r4.json b/advisories/github-reviewed/2025/03/GHSA-cj47-qj6g-x7r4/GHSA-cj47-qj6g-x7r4.json
similarity index 58%
rename from advisories/unreviewed/2025/03/GHSA-cj47-qj6g-x7r4/GHSA-cj47-qj6g-x7r4.json
rename to advisories/github-reviewed/2025/03/GHSA-cj47-qj6g-x7r4/GHSA-cj47-qj6g-x7r4.json
index 654afb615bf..d33f400d686 100644
--- a/advisories/unreviewed/2025/03/GHSA-cj47-qj6g-x7r4/GHSA-cj47-qj6g-x7r4.json
+++ b/advisories/github-reviewed/2025/03/GHSA-cj47-qj6g-x7r4/GHSA-cj47-qj6g-x7r4.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cj47-qj6g-x7r4",
-  "modified": "2025-03-20T12:32:50Z",
+  "modified": "2025-03-21T03:30:51Z",
   "published": "2025-03-20T12:32:50Z",
   "aliases": [
     "CVE-2024-9053"
   ],
+  "summary": "vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints",
   "details": "vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.",
   "severity": [
     {
@@ -13,12 +14,36 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "vllm"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.6.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9053"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/vllm-project/vllm"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/75a544f3-34a3-4da0-b5a3-1495cb031e09"
@@ -26,11 +51,11 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-78"
+      "CWE-502"
     ],
     "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T03:30:51Z",
     "nvd_published_at": "2025-03-20T10:15:46Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-pgr7-mhp5-fgjp/GHSA-pgr7-mhp5-fgjp.json b/advisories/github-reviewed/2025/03/GHSA-pgr7-mhp5-fgjp/GHSA-pgr7-mhp5-fgjp.json
similarity index 52%
rename from advisories/unreviewed/2025/03/GHSA-pgr7-mhp5-fgjp/GHSA-pgr7-mhp5-fgjp.json
rename to advisories/github-reviewed/2025/03/GHSA-pgr7-mhp5-fgjp/GHSA-pgr7-mhp5-fgjp.json
index c879d90c80c..b5111443ce4 100644
--- a/advisories/unreviewed/2025/03/GHSA-pgr7-mhp5-fgjp/GHSA-pgr7-mhp5-fgjp.json
+++ b/advisories/github-reviewed/2025/03/GHSA-pgr7-mhp5-fgjp/GHSA-pgr7-mhp5-fgjp.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pgr7-mhp5-fgjp",
-  "modified": "2025-03-20T12:32:50Z",
+  "modified": "2025-03-21T03:30:39Z",
   "published": "2025-03-20T12:32:50Z",
   "aliases": [
     "CVE-2024-9052"
   ],
+  "summary": "vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object",
   "details": "vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv_object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability.",
   "severity": [
     {
@@ -13,12 +14,40 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "vllm"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.8.1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9052"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/vllm-project/vllm"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/blob/32e7db25365415841ebc7c4215851743fbb1bad1/vllm/distributed/parallel_state.py#L480"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/ea75728f-4efe-4a3d-9f53-33f2c908e9f8"
@@ -29,8 +58,8 @@
       "CWE-502"
     ],
     "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T03:30:38Z",
     "nvd_published_at": "2025-03-20T10:15:46Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-7hqh-xh4r-x7q4/GHSA-7hqh-xh4r-x7q4.json b/advisories/unreviewed/2025/03/GHSA-7hqh-xh4r-x7q4/GHSA-7hqh-xh4r-x7q4.json
new file mode 100644
index 00000000000..ed7ad0e8381
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-7hqh-xh4r-x7q4/GHSA-7hqh-xh4r-x7q4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7hqh-xh4r-x7q4",
+  "modified": "2025-03-21T03:30:26Z",
+  "published": "2025-03-21T03:30:26Z",
+  "aliases": [
+    "CVE-2025-26336"
+  ],
+  "details": "Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26336"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dell.com/support/kbdoc/en-us/000297463/dsa-2025-123-security-update-for-dell-chassis-management-controller-firmware-for-dell-poweredge-fx2-and-vrtx-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-21T03:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-7m7p-4552-89x5/GHSA-7m7p-4552-89x5.json b/advisories/unreviewed/2025/03/GHSA-7m7p-4552-89x5/GHSA-7m7p-4552-89x5.json
new file mode 100644
index 00000000000..a9b5bd81f4a
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-7m7p-4552-89x5/GHSA-7m7p-4552-89x5.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7m7p-4552-89x5",
+  "modified": "2025-03-21T03:30:26Z",
+  "published": "2025-03-21T03:30:26Z",
+  "aliases": [
+    "CVE-2025-2585"
+  ],
+  "details": "EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2585"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.twcert.org.tw/en/cp-139-10022-8e28e-2.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.twcert.org.tw/tw/cp-132-10021-8786e-1.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-21T02:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-99rg-j7qx-fjp3/GHSA-99rg-j7qx-fjp3.json b/advisories/unreviewed/2025/03/GHSA-99rg-j7qx-fjp3/GHSA-99rg-j7qx-fjp3.json
new file mode 100644
index 00000000000..2d1b95ec1ae
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-99rg-j7qx-fjp3/GHSA-99rg-j7qx-fjp3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-99rg-j7qx-fjp3",
+  "modified": "2025-03-21T03:30:26Z",
+  "published": "2025-03-21T03:30:26Z",
+  "aliases": [
+    "CVE-2025-29807"
+  ],
+  "details": "Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29807"
+    },
+    {
+      "type": "WEB",
+      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29807"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-21T01:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-hrqh-mj8r-gjgp/GHSA-hrqh-mj8r-gjgp.json b/advisories/unreviewed/2025/03/GHSA-hrqh-mj8r-gjgp/GHSA-hrqh-mj8r-gjgp.json
new file mode 100644
index 00000000000..d660312e37b
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-hrqh-mj8r-gjgp/GHSA-hrqh-mj8r-gjgp.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hrqh-mj8r-gjgp",
+  "modified": "2025-03-21T03:30:26Z",
+  "published": "2025-03-21T03:30:26Z",
+  "aliases": [
+    "CVE-2023-28207"
+  ],
+  "details": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28207"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.apple.com/en-us/102784"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.apple.com/en-us/102833"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.apple.com/en-us/120945"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-21T01:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-mw9r-33gj-wgv8/GHSA-mw9r-33gj-wgv8.json b/advisories/unreviewed/2025/03/GHSA-mw9r-33gj-wgv8/GHSA-mw9r-33gj-wgv8.json
new file mode 100644
index 00000000000..d093dbd9410
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-mw9r-33gj-wgv8/GHSA-mw9r-33gj-wgv8.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mw9r-33gj-wgv8",
+  "modified": "2025-03-21T03:30:26Z",
+  "published": "2025-03-21T03:30:26Z",
+  "aliases": [
+    "CVE-2025-29814"
+  ],
+  "details": "Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29814"
+    },
+    {
+      "type": "WEB",
+      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29814"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-21T01:15:17Z"
+  }
+}
\ No newline at end of file