Publish Advisories

GHSA-crh6-fp67-6883
GHSA-24wv-mv5m-xv4h
GHSA-j5w9-hmfh-4cr6

advisories/github-reviewed/2022/11/GHSA-crh6-fp67-6883/GHSA-crh6-fp67-6883.json

@@ -105,6 +105,18 @@
       "type": "WEB",
       "url": "https://github.com/jindw/xmldom/issues/150"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xmldom/xmldom/commit/52a708360c35aa160fcca8621720d71fd0f95f1a"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xmldom/xmldom/commit/7ff7c10ab2961703ac1752e95b4ff60ee4ee6643"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xmldom/xmldom/commit/c02f786216bed70825f9a351c65e61500f51e931"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/xmldom/xmldom"

advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json

@@ -99,6 +99,14 @@
       "type": "WEB",
       "url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/redis/redis-py/releases/tag/v4.4.4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/redis/redis-py/releases/tag/v4.5.4"
+    },
     {
       "type": "WEB",
       "url": "https://openai.com/blog/march-20-chatgpt-outage"

advisories/github-reviewed/2023/03/GHSA-j5w9-hmfh-4cr6/GHSA-j5w9-hmfh-4cr6.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j5w9-hmfh-4cr6",
-  "modified": "2023-03-27T21:22:48Z",
+  "modified": "2023-03-31T16:06:04Z",
   "published": "2023-03-24T21:55:07Z",
   "aliases": [
     "CVE-2023-25671"
@@ -9,7 +9,10 @@
   "summary": "TensorFlow has segmentation fault in tfg-translate ",
   "details": "### Impact\nOut-of-bounds access due to mismatched integer type sizes in ValueMap::Manager::GetValueOrCreatePlaceholder. Bug with tfg-translate call to InitMlir. The problem happens with generic functions, as it is already handled for non-generic functions. This is because they, unlike non-generic functions, are using the \"old importer\". A better long-term solution may be to have the \"new importer\" handle generic functions.\n\n### Patches\nWe have patched the issue in GitHub\n- commit [760322a71ac9033e122ef1f4b1c62813021e5938](https://github.com/tensorflow/tensorflow/commit/760322a71ac9033e122ef1f4b1c62813021e5938).\n- commit [2eedc8f676d2c3b8be9492e547b2bc814c10b367](https://github.com/tensorflow/tensorflow/commit/2eedc8f676d2c3b8be9492e547b2bc814c10b367)\n\nThe fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1\n\n\n### For more information\nPlease consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.\n\n\n### Attribution\nThis vulnerability has been reported by r3pwnx\n\n### Affiliation\n360 AIVul\n\n",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -77,7 +80,7 @@
     "cwe_ids": [
       "CWE-787"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-03-24T21:55:07Z",
     "nvd_published_at": "2023-03-25T00:15:00Z"