From 478568538f92eb4614363e5d51f6c828637a69b3 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 5 Feb 2024 10:39:31 +0000
Subject: [PATCH] Publish Advisories

GHSA-hq5m-mqmx-fw6m
GHSA-hr3h-x6gq-rqcp
---
 .../GHSA-hq5m-mqmx-fw6m.json                  | 65 +++++++++++++++++
 .../GHSA-hr3h-x6gq-rqcp.json                  | 73 ++++++++++++++++++-
 2 files changed, 136 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2021/08/GHSA-hq5m-mqmx-fw6m/GHSA-hq5m-mqmx-fw6m.json b/advisories/github-reviewed/2021/08/GHSA-hq5m-mqmx-fw6m/GHSA-hq5m-mqmx-fw6m.json
index ffb200dd6cb..8e6467f1709 100644
--- a/advisories/github-reviewed/2021/08/GHSA-hq5m-mqmx-fw6m/GHSA-hq5m-mqmx-fw6m.json
+++ b/advisories/github-reviewed/2021/08/GHSA-hq5m-mqmx-fw6m/GHSA-hq5m-mqmx-fw6m.json
@@ -71,6 +71,63 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "contao/contao"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.0.0"
+            },
+            {
+              "fixed": "4.4.56"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "contao/contao"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.5.0"
+            },
+            {
+              "fixed": "4.9.18"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "contao/contao"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.10.0"
+            },
+            {
+              "fixed": "4.11.7"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [
@@ -86,6 +143,14 @@
       "type": "WEB",
       "url": "https://contao.org/en/security-advisories/privilege-escalation-with-the-form-generator.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2021-37627.yaml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2021-37627.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/contao/contao"
diff --git a/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json b/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json
index ea54cfc14d5..4c7390e3811 100644
--- a/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json
+++ b/advisories/github-reviewed/2021/08/GHSA-hr3h-x6gq-rqcp/GHSA-hr3h-x6gq-rqcp.json
@@ -34,6 +34,63 @@
         }
       ]
     },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "contao/contao"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.0.0"
+            },
+            {
+              "fixed": "4.4.56"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "contao/contao"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.5.0"
+            },
+            {
+              "fixed": "4.9.18"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "contao/contao"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.10.0"
+            },
+            {
+              "fixed": "4.11.7"
+            }
+          ]
+        }
+      ]
+    },
     {
       "package": {
         "ecosystem": "Packagist",
@@ -44,7 +101,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "4.9.0"
+              "introduced": "4.5.0"
             },
             {
               "fixed": "4.9.18"
@@ -63,7 +120,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "4.11.0"
+              "introduced": "4.10.0"
             },
             {
               "fixed": "4.11.7"
@@ -86,6 +143,18 @@
       "type": "WEB",
       "url": "https://contao.org/en/news/contao-4-9-16-and-4-11-5-are-available.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://contao.org/en/security-advisories/cross-site-scripting-via-html-attributes-in-the-back-end.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2021-35955.yaml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2021-35955.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/contao/contao"