From 44d937aa4073985d742664fe0ef5a40f558a548d Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 11 Oct 2024 21:10:01 +0000 Subject: [PATCH] Publish Advisories GHSA-gpvv-69j7-gwj8 GHSA-pw3c-h7wp-cvhx --- .../GHSA-gpvv-69j7-gwj8.json | 14 ++++++++++++- .../GHSA-pw3c-h7wp-cvhx.json | 21 ++++++++++++------- 2 files changed, 27 insertions(+), 8 deletions(-) diff --git a/advisories/github-reviewed/2021/06/GHSA-gpvv-69j7-gwj8/GHSA-gpvv-69j7-gwj8.json b/advisories/github-reviewed/2021/06/GHSA-gpvv-69j7-gwj8/GHSA-gpvv-69j7-gwj8.json index bd08124c8b7..2d2881e80df 100644 --- a/advisories/github-reviewed/2021/06/GHSA-gpvv-69j7-gwj8/GHSA-gpvv-69j7-gwj8.json +++ b/advisories/github-reviewed/2021/06/GHSA-gpvv-69j7-gwj8/GHSA-gpvv-69j7-gwj8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gpvv-69j7-gwj8", - "modified": "2022-04-21T15:43:34Z", + "modified": "2024-10-11T21:08:14Z", "published": "2021-06-09T17:35:04Z", "aliases": [ "CVE-2019-20916" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -48,6 +52,14 @@ "type": "WEB", "url": "https://github.com/gzpan123/pip/commit/a4c735b14a62f9cb864533808ac63936704f2ace" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-gpvv-69j7-gwj8" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pip/PYSEC-2020-173.yaml" + }, { "type": "WEB", "url": "https://github.com/pypa/pip" diff --git a/advisories/github-reviewed/2022/01/GHSA-pw3c-h7wp-cvhx/GHSA-pw3c-h7wp-cvhx.json b/advisories/github-reviewed/2022/01/GHSA-pw3c-h7wp-cvhx/GHSA-pw3c-h7wp-cvhx.json index 6f68133eca9..ec546444fb4 100644 --- a/advisories/github-reviewed/2022/01/GHSA-pw3c-h7wp-cvhx/GHSA-pw3c-h7wp-cvhx.json +++ b/advisories/github-reviewed/2022/01/GHSA-pw3c-h7wp-cvhx/GHSA-pw3c-h7wp-cvhx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pw3c-h7wp-cvhx", - "modified": "2024-04-03T20:28:18Z", + "modified": "2024-10-11T21:09:06Z", "published": "2022-01-12T20:07:43Z", "aliases": [ "CVE-2022-22815" @@ -12,18 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "Pillow" - }, - "ecosystem_specific": { - "affected_functions": [ - "PIL.ImagePath.Path.__init__" - ] + "name": "pillow" }, "ranges": [ { @@ -57,6 +56,14 @@ "type": "WEB", "url": "https://github.com/python-pillow/Pillow/commit/c48271ab354db49cdbd740bc45e13be4f0f7993c" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-pw3c-h7wp-cvhx" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2022-8.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/python-pillow/Pillow"