diff --git a/advisories/github-reviewed/2022/11/GHSA-crh6-fp67-6883/GHSA-crh6-fp67-6883.json b/advisories/github-reviewed/2022/11/GHSA-crh6-fp67-6883/GHSA-crh6-fp67-6883.json index 7f120cadb3a..fd5a94cbc7d 100644 --- a/advisories/github-reviewed/2022/11/GHSA-crh6-fp67-6883/GHSA-crh6-fp67-6883.json +++ b/advisories/github-reviewed/2022/11/GHSA-crh6-fp67-6883/GHSA-crh6-fp67-6883.json @@ -105,6 +105,18 @@ "type": "WEB", "url": "https://github.com/jindw/xmldom/issues/150" }, + { + "type": "WEB", + "url": "https://github.com/xmldom/xmldom/commit/52a708360c35aa160fcca8621720d71fd0f95f1a" + }, + { + "type": "WEB", + "url": "https://github.com/xmldom/xmldom/commit/7ff7c10ab2961703ac1752e95b4ff60ee4ee6643" + }, + { + "type": "WEB", + "url": "https://github.com/xmldom/xmldom/commit/c02f786216bed70825f9a351c65e61500f51e931" + }, { "type": "PACKAGE", "url": "https://github.com/xmldom/xmldom" diff --git a/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json b/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json index abdae7465c2..f00fa833630 100644 --- a/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json +++ b/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json @@ -99,6 +99,14 @@ "type": "WEB", "url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3" }, + { + "type": "WEB", + "url": "https://github.com/redis/redis-py/releases/tag/v4.4.4" + }, + { + "type": "WEB", + "url": "https://github.com/redis/redis-py/releases/tag/v4.5.4" + }, { "type": "WEB", "url": "https://openai.com/blog/march-20-chatgpt-outage" diff --git a/advisories/github-reviewed/2023/03/GHSA-j5w9-hmfh-4cr6/GHSA-j5w9-hmfh-4cr6.json b/advisories/github-reviewed/2023/03/GHSA-j5w9-hmfh-4cr6/GHSA-j5w9-hmfh-4cr6.json index b3e67a7cd26..52bcb4acca6 100644 --- a/advisories/github-reviewed/2023/03/GHSA-j5w9-hmfh-4cr6/GHSA-j5w9-hmfh-4cr6.json +++ b/advisories/github-reviewed/2023/03/GHSA-j5w9-hmfh-4cr6/GHSA-j5w9-hmfh-4cr6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-j5w9-hmfh-4cr6", - "modified": "2023-03-27T21:22:48Z", + "modified": "2023-03-31T16:06:04Z", "published": "2023-03-24T21:55:07Z", "aliases": [ "CVE-2023-25671" @@ -9,7 +9,10 @@ "summary": "TensorFlow has segmentation fault in tfg-translate ", "details": "### Impact\nOut-of-bounds access due to mismatched integer type sizes in ValueMap::Manager::GetValueOrCreatePlaceholder. Bug with tfg-translate call to InitMlir. The problem happens with generic functions, as it is already handled for non-generic functions. This is because they, unlike non-generic functions, are using the \"old importer\". A better long-term solution may be to have the \"new importer\" handle generic functions.\n\n### Patches\nWe have patched the issue in GitHub\n- commit [760322a71ac9033e122ef1f4b1c62813021e5938](https://github.com/tensorflow/tensorflow/commit/760322a71ac9033e122ef1f4b1c62813021e5938).\n- commit [2eedc8f676d2c3b8be9492e547b2bc814c10b367](https://github.com/tensorflow/tensorflow/commit/2eedc8f676d2c3b8be9492e547b2bc814c10b367)\n\nThe fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1\n\n\n### For more information\nPlease consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.\n\n\n### Attribution\nThis vulnerability has been reported by r3pwnx\n\n### Affiliation\n360 AIVul\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ { @@ -77,7 +80,7 @@ "cwe_ids": [ "CWE-787" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-03-24T21:55:07Z", "nvd_published_at": "2023-03-25T00:15:00Z"