From 4150bbfe2159ed404e28fd4ab6425ac6bc553690 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 20 Sep 2024 17:52:36 +0000 Subject: [PATCH] Publish Advisories GHSA-m2qf-hxjv-5gpq GHSA-672h-6x89-76m5 --- .../GHSA-m2qf-hxjv-5gpq.json | 10 ++++--- .../GHSA-672h-6x89-76m5.json | 27 +++++-------------- 2 files changed, 13 insertions(+), 24 deletions(-) diff --git a/advisories/github-reviewed/2023/05/GHSA-m2qf-hxjv-5gpq/GHSA-m2qf-hxjv-5gpq.json b/advisories/github-reviewed/2023/05/GHSA-m2qf-hxjv-5gpq/GHSA-m2qf-hxjv-5gpq.json index eede4fcd921..478714f8ece 100644 --- a/advisories/github-reviewed/2023/05/GHSA-m2qf-hxjv-5gpq/GHSA-m2qf-hxjv-5gpq.json +++ b/advisories/github-reviewed/2023/05/GHSA-m2qf-hxjv-5gpq/GHSA-m2qf-hxjv-5gpq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-m2qf-hxjv-5gpq", - "modified": "2023-05-01T19:22:20Z", + "modified": "2024-09-20T17:51:00Z", "published": "2023-05-01T19:22:20Z", "aliases": [ "CVE-2023-30861" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "flask" + "name": "Flask" }, "ecosystem_specific": { "affected_functions": [ @@ -42,7 +46,7 @@ { "package": { "ecosystem": "PyPI", - "name": "flask" + "name": "Flask" }, "ecosystem_specific": { "affected_functions": [ diff --git a/advisories/github-reviewed/2023/12/GHSA-672h-6x89-76m5/GHSA-672h-6x89-76m5.json b/advisories/github-reviewed/2023/12/GHSA-672h-6x89-76m5/GHSA-672h-6x89-76m5.json index 4977a676a17..e831ffbf7a5 100644 --- a/advisories/github-reviewed/2023/12/GHSA-672h-6x89-76m5/GHSA-672h-6x89-76m5.json +++ b/advisories/github-reviewed/2023/12/GHSA-672h-6x89-76m5/GHSA-672h-6x89-76m5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-672h-6x89-76m5", - "modified": "2024-01-08T21:47:12Z", + "modified": "2024-09-20T17:51:44Z", "published": "2023-12-27T00:30:25Z", "aliases": [ "CVE-2023-49438" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" } ], "affected": [ @@ -33,25 +37,6 @@ ] } ] - }, - { - "package": { - "ecosystem": "PyPI", - "name": "flask-security-too" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "fixed": "5.3.3" - } - ] - } - ] } ], "references": [ @@ -64,7 +49,7 @@ "url": "https://github.com/Flask-Middleware/flask-security/commit/8b5abc4d4db9926a3d76b34b8b03255effb5e712" }, { - "type": "WEB", + "type": "PACKAGE", "url": "https://github.com/Flask-Middleware/flask-security" }, {