diff --git a/advisories/github-reviewed/2021/04/GHSA-gg2g-m5wc-vccq/GHSA-gg2g-m5wc-vccq.json b/advisories/github-reviewed/2021/04/GHSA-gg2g-m5wc-vccq/GHSA-gg2g-m5wc-vccq.json index e8031ba1243..58f1a9dc46c 100644 --- a/advisories/github-reviewed/2021/04/GHSA-gg2g-m5wc-vccq/GHSA-gg2g-m5wc-vccq.json +++ b/advisories/github-reviewed/2021/04/GHSA-gg2g-m5wc-vccq/GHSA-gg2g-m5wc-vccq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gg2g-m5wc-vccq", - "modified": "2021-04-16T22:53:30Z", + "modified": "2024-10-21T20:05:47Z", "published": "2021-04-06T18:36:40Z", "aliases": [ "CVE-2021-21423" @@ -11,7 +11,11 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -33,6 +37,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "projen" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.16.41" + } + ] + } + ] } ], "references": [ @@ -48,6 +71,14 @@ "type": "WEB", "url": "https://github.com/projen/projen/commit/36030c6a4b1acd0054673322612e7c70e9446643" }, + { + "type": "PACKAGE", + "url": "https://github.com/projen/projen" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/projen/PYSEC-2021-111.yaml" + }, { "type": "WEB", "url": "https://www.npmjs.com/package/projen" diff --git a/advisories/github-reviewed/2021/08/GHSA-q3m9-9fj2-mfwr/GHSA-q3m9-9fj2-mfwr.json b/advisories/github-reviewed/2021/08/GHSA-q3m9-9fj2-mfwr/GHSA-q3m9-9fj2-mfwr.json index 31e96320b09..54009320d98 100644 --- a/advisories/github-reviewed/2021/08/GHSA-q3m9-9fj2-mfwr/GHSA-q3m9-9fj2-mfwr.json +++ b/advisories/github-reviewed/2021/08/GHSA-q3m9-9fj2-mfwr/GHSA-q3m9-9fj2-mfwr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q3m9-9fj2-mfwr", - "modified": "2021-08-30T23:21:07Z", + "modified": "2024-10-21T20:06:22Z", "published": "2021-08-05T17:02:12Z", "aliases": [ "CVE-2021-32806" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -52,6 +56,10 @@ "type": "PACKAGE", "url": "https://github.com/plone/Products.isurlinportal" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/products-isurlinportal/PYSEC-2021-323.yaml" + }, { "type": "WEB", "url": "http://jvn.jp/en/jp/JVN50804280/index.html" @@ -61,7 +69,7 @@ "cwe_ids": [ "CWE-601" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2021-08-02T23:19:30Z", "nvd_published_at": "2021-08-02T19:15:00Z" diff --git a/advisories/github-reviewed/2021/10/GHSA-r838-q6jp-58xx/GHSA-r838-q6jp-58xx.json b/advisories/github-reviewed/2021/10/GHSA-r838-q6jp-58xx/GHSA-r838-q6jp-58xx.json index 19e45b4add4..1c5d7a7a9e5 100644 --- a/advisories/github-reviewed/2021/10/GHSA-r838-q6jp-58xx/GHSA-r838-q6jp-58xx.json +++ b/advisories/github-reviewed/2021/10/GHSA-r838-q6jp-58xx/GHSA-r838-q6jp-58xx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r838-q6jp-58xx", - "modified": "2021-10-08T23:00:17Z", + "modified": "2024-10-21T20:06:57Z", "published": "2021-10-12T16:31:22Z", "aliases": [ "CVE-2013-1895" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -44,6 +48,18 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83039" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-r838-q6jp-58xx" + }, + { + "type": "PACKAGE", + "url": "https://github.com/grnet/python-bcrypt" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/py-bcrypt/PYSEC-2020-249.yaml" + }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101382.html" @@ -55,10 +71,6 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2013/03/26/2" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/58702" } ], "database_specific": {