Publish Advisories

GHSA-frpw-jrwx-hcfv
GHSA-4fr2-j4g9-mppf

advisories/github-reviewed/2021/04/GHSA-frpw-jrwx-hcfv/GHSA-frpw-jrwx-hcfv.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-frpw-jrwx-hcfv",
-  "modified": "2023-08-16T21:39:22Z",
+  "modified": "2023-09-07T22:38:20Z",
   "published": "2021-04-13T15:30:00Z",
   "aliases": [
     "CVE-2021-25864"
   ],
   "summary": "Path Traversal in node-red-contrib-huemagic",
-  "details": "node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.",
+  "details": "node-red-contrib-huemagic 3.0.0 is affected by `hue/assets/..%2F` Directory Traversal.in the `res.sendFile` API, used in file hue-magic.js, to fetch an arbitrary file.",
   "severity": [
     {
       "type": "CVSS_V3",

advisories/github-reviewed/2021/09/GHSA-4fr2-j4g9-mppf/GHSA-4fr2-j4g9-mppf.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4fr2-j4g9-mppf",
-  "modified": "2021-07-26T18:25:52Z",
+  "modified": "2023-09-07T22:37:35Z",
   "published": "2021-09-24T15:42:21Z",
   "aliases": [
     "CVE-2020-28271"
   ],
-  "summary": "Improperly Controlled Modification of Dynamically-Determined Object Attributes in deephas",
+  "summary": "Prototype Pollution in deephas",
   "details": "Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.",
   "severity": [
     {
@@ -20,6 +20,11 @@
         "ecosystem": "npm",
         "name": "deephas"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",