diff --git a/advisories/github-reviewed/2020/05/GHSA-5mh9-r3rr-9597/GHSA-5mh9-r3rr-9597.json b/advisories/github-reviewed/2020/05/GHSA-5mh9-r3rr-9597/GHSA-5mh9-r3rr-9597.json index dc91f105291..63945755ce8 100644 --- a/advisories/github-reviewed/2020/05/GHSA-5mh9-r3rr-9597/GHSA-5mh9-r3rr-9597.json +++ b/advisories/github-reviewed/2020/05/GHSA-5mh9-r3rr-9597/GHSA-5mh9-r3rr-9597.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-5mh9-r3rr-9597", - "modified": "2021-08-25T21:12:09Z", + "modified": "2023-12-07T23:05:12Z", "published": "2020-05-21T21:08:33Z", "aliases": [ "CVE-2020-5529" ], "summary": "Code execution vulnerability in HtmlUnit", - "details": "HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.", + "details": "HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application. ", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2023/12/GHSA-5844-q3fc-56rh/GHSA-5844-q3fc-56rh.json b/advisories/github-reviewed/2023/12/GHSA-5844-q3fc-56rh/GHSA-5844-q3fc-56rh.json index 64c6c3be3b5..a95f9271ebb 100644 --- a/advisories/github-reviewed/2023/12/GHSA-5844-q3fc-56rh/GHSA-5844-q3fc-56rh.json +++ b/advisories/github-reviewed/2023/12/GHSA-5844-q3fc-56rh/GHSA-5844-q3fc-56rh.json @@ -295,6 +295,10 @@ "type": "WEB", "url": "https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-5844-q3fc-56rh" + }, { "type": "PACKAGE", "url": "https://github.com/pubnub/javascript" @@ -303,6 +307,10 @@ "type": "WEB", "url": "https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70" }, + { + "type": "WEB", + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml" + }, { "type": "WEB", "url": "https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384"