diff --git a/advisories/github-reviewed/2021/04/GHSA-frpw-jrwx-hcfv/GHSA-frpw-jrwx-hcfv.json b/advisories/github-reviewed/2021/04/GHSA-frpw-jrwx-hcfv/GHSA-frpw-jrwx-hcfv.json index fa5784e3b54..f83d1efe470 100644 --- a/advisories/github-reviewed/2021/04/GHSA-frpw-jrwx-hcfv/GHSA-frpw-jrwx-hcfv.json +++ b/advisories/github-reviewed/2021/04/GHSA-frpw-jrwx-hcfv/GHSA-frpw-jrwx-hcfv.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-frpw-jrwx-hcfv", - "modified": "2023-08-16T21:39:22Z", + "modified": "2023-09-07T22:38:20Z", "published": "2021-04-13T15:30:00Z", "aliases": [ "CVE-2021-25864" ], "summary": "Path Traversal in node-red-contrib-huemagic", - "details": "node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.", + "details": "node-red-contrib-huemagic 3.0.0 is affected by `hue/assets/..%2F` Directory Traversal.in the `res.sendFile` API, used in file hue-magic.js, to fetch an arbitrary file.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2021/09/GHSA-4fr2-j4g9-mppf/GHSA-4fr2-j4g9-mppf.json b/advisories/github-reviewed/2021/09/GHSA-4fr2-j4g9-mppf/GHSA-4fr2-j4g9-mppf.json index 155e178f2aa..71ddc7e608d 100644 --- a/advisories/github-reviewed/2021/09/GHSA-4fr2-j4g9-mppf/GHSA-4fr2-j4g9-mppf.json +++ b/advisories/github-reviewed/2021/09/GHSA-4fr2-j4g9-mppf/GHSA-4fr2-j4g9-mppf.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-4fr2-j4g9-mppf", - "modified": "2021-07-26T18:25:52Z", + "modified": "2023-09-07T22:37:35Z", "published": "2021-09-24T15:42:21Z", "aliases": [ "CVE-2020-28271" ], - "summary": "Improperly Controlled Modification of Dynamically-Determined Object Attributes in deephas", + "summary": "Prototype Pollution in deephas", "details": "Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.", "severity": [ { @@ -20,6 +20,11 @@ "ecosystem": "npm", "name": "deephas" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM",