Advisory Database Sync

advisories/github-reviewed/2020/09/GHSA-2ggq-vfcp-gwhj/GHSA-2ggq-vfcp-gwhj.json

@@ -3,9 +3,7 @@
   "id": "GHSA-2ggq-vfcp-gwhj",
   "modified": "2023-10-02T18:43:16Z",
   "published": "2020-09-04T17:33:53Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
   "summary": "Cross-Site Scripting in @hapi/boom",
   "details": "Versions of `@hapi/boom` prior to 0.3.8 are vulnerable to Cross-Site Scripting (XSS). The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser.\n\n\n## Recommendation\n\nUpgrade to version 0.3.8 or later.",
   "severity": [

advisories/github-reviewed/2020/09/GHSA-4f9m-pxwh-68hg/GHSA-4f9m-pxwh-68hg.json

@@ -3,9 +3,7 @@
   "id": "GHSA-4f9m-pxwh-68hg",
   "modified": "2021-09-28T16:57:07Z",
   "published": "2020-09-11T21:20:14Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
   "summary": "Cross-Site Scripting in swagger-ui",
   "details": "Versions of `swagger-ui` prior to 3.20.9 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize URLs used in the OAuth auth flow, which may allow attackers to execute arbitrary JavaScript.\n\n\n## Recommendation\n\nUpgrade to version 3.20.9 or later.",
   "severity": [

advisories/github-reviewed/2020/09/GHSA-4xf9-pgvv-xx67/GHSA-4xf9-pgvv-xx67.json

@@ -3,9 +3,7 @@
   "id": "GHSA-4xf9-pgvv-xx67",
   "modified": "2021-09-29T18:16:33Z",
   "published": "2020-09-03T20:27:46Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
   "summary": "Regular Expression Denial of Service in simple-markdown",
   "details": "Versions of `simple-markdown` prior to 0.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS). The `SimpleMarkdown.defaultInlineParse()` function has significantly degraded performance when parsing inline code blocks.\n\n\n## Recommendation\n\nUpgrade to version 0.5.2 or later.",
   "severity": [