From 518390e4b4d07dff6bab7a01407b74ab6758dd4d Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 8 Oct 2024 13:07:37 +0000
Subject: [PATCH] Publish Advisories

GHSA-hvr8-466p-75rh
GHSA-rwr3-c2q8-gm56
GHSA-5gm3-px64-rw72
GHSA-f5g8-5qq7-938w
GHSA-hf64-x4gq-p99h
---
 .../GHSA-hvr8-466p-75rh/GHSA-hvr8-466p-75rh.json | 12 ++++++++++--
 .../GHSA-rwr3-c2q8-gm56/GHSA-rwr3-c2q8-gm56.json | 12 ++++++++++--
 .../GHSA-5gm3-px64-rw72/GHSA-5gm3-px64-rw72.json | 16 ++++++++++++++--
 .../GHSA-f5g8-5qq7-938w/GHSA-f5g8-5qq7-938w.json | 16 ++++++++++++++--
 .../GHSA-hf64-x4gq-p99h/GHSA-hf64-x4gq-p99h.json | 16 ++++++++++++++--
 5 files changed, 62 insertions(+), 10 deletions(-)

diff --git a/advisories/github-reviewed/2018/07/GHSA-hvr8-466p-75rh/GHSA-hvr8-466p-75rh.json b/advisories/github-reviewed/2018/07/GHSA-hvr8-466p-75rh/GHSA-hvr8-466p-75rh.json
index 599790d91b5..d89ef71a4c9 100644
--- a/advisories/github-reviewed/2018/07/GHSA-hvr8-466p-75rh/GHSA-hvr8-466p-75rh.json
+++ b/advisories/github-reviewed/2018/07/GHSA-hvr8-466p-75rh/GHSA-hvr8-466p-75rh.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hvr8-466p-75rh",
-  "modified": "2023-09-05T09:28:30Z",
+  "modified": "2024-10-08T13:06:58Z",
   "published": "2018-07-24T20:15:48Z",
   "aliases": [
     "CVE-2016-4009"
@@ -12,13 +12,17 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "Pillow"
+        "name": "pillow"
       },
       "ranges": [
         {
@@ -52,6 +56,10 @@
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-hvr8-466p-75rh"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2016-7.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/python-pillow/Pillow"
diff --git a/advisories/github-reviewed/2018/07/GHSA-rwr3-c2q8-gm56/GHSA-rwr3-c2q8-gm56.json b/advisories/github-reviewed/2018/07/GHSA-rwr3-c2q8-gm56/GHSA-rwr3-c2q8-gm56.json
index ec50297125c..68aa47dafae 100644
--- a/advisories/github-reviewed/2018/07/GHSA-rwr3-c2q8-gm56/GHSA-rwr3-c2q8-gm56.json
+++ b/advisories/github-reviewed/2018/07/GHSA-rwr3-c2q8-gm56/GHSA-rwr3-c2q8-gm56.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rwr3-c2q8-gm56",
-  "modified": "2023-09-05T09:20:57Z",
+  "modified": "2024-10-08T13:06:30Z",
   "published": "2018-07-24T20:08:27Z",
   "aliases": [
     "CVE-2016-9189"
@@ -12,13 +12,17 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "Pillow"
+        "name": "pillow"
       },
       "ranges": [
         {
@@ -52,6 +56,10 @@
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-rwr3-c2q8-gm56"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2016-8.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/python-pillow/Pillow"
diff --git a/advisories/github-reviewed/2020/04/GHSA-5gm3-px64-rw72/GHSA-5gm3-px64-rw72.json b/advisories/github-reviewed/2020/04/GHSA-5gm3-px64-rw72/GHSA-5gm3-px64-rw72.json
index faefe5b2091..55ed87b8cf6 100644
--- a/advisories/github-reviewed/2020/04/GHSA-5gm3-px64-rw72/GHSA-5gm3-px64-rw72.json
+++ b/advisories/github-reviewed/2020/04/GHSA-5gm3-px64-rw72/GHSA-5gm3-px64-rw72.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5gm3-px64-rw72",
-  "modified": "2023-02-02T10:30:38Z",
+  "modified": "2024-10-08T13:04:35Z",
   "published": "2020-04-01T16:36:44Z",
   "aliases": [
     "CVE-2019-19911"
@@ -12,13 +12,17 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "Pillow"
+        "name": "pillow"
       },
       "ranges": [
         {
@@ -44,6 +48,14 @@
       "type": "WEB",
       "url": "https://github.com/python-pillow/Pillow/commit/774e53bb132461d8d5ebefec1162e29ec0ebc63d"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-5gm3-px64-rw72"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2020-172.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst#622-2020-01-02"
diff --git a/advisories/github-reviewed/2021/03/GHSA-f5g8-5qq7-938w/GHSA-f5g8-5qq7-938w.json b/advisories/github-reviewed/2021/03/GHSA-f5g8-5qq7-938w/GHSA-f5g8-5qq7-938w.json
index bbceaf99cad..bedc6f20e1e 100644
--- a/advisories/github-reviewed/2021/03/GHSA-f5g8-5qq7-938w/GHSA-f5g8-5qq7-938w.json
+++ b/advisories/github-reviewed/2021/03/GHSA-f5g8-5qq7-938w/GHSA-f5g8-5qq7-938w.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f5g8-5qq7-938w",
-  "modified": "2023-09-04T16:30:52Z",
+  "modified": "2024-10-08T13:05:45Z",
   "published": "2021-03-18T19:55:41Z",
   "aliases": [
     "CVE-2020-35653"
@@ -12,13 +12,17 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "Pillow"
+        "name": "pillow"
       },
       "ranges": [
         {
@@ -44,6 +48,14 @@
       "type": "WEB",
       "url": "https://github.com/python-pillow/Pillow/commit/2f409261eb1228e166868f8f0b5da5cda52e55bf"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-f5g8-5qq7-938w"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-69.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/python-pillow/Pillow"
diff --git a/advisories/github-reviewed/2021/03/GHSA-hf64-x4gq-p99h/GHSA-hf64-x4gq-p99h.json b/advisories/github-reviewed/2021/03/GHSA-hf64-x4gq-p99h/GHSA-hf64-x4gq-p99h.json
index a842c630d27..5eed433867f 100644
--- a/advisories/github-reviewed/2021/03/GHSA-hf64-x4gq-p99h/GHSA-hf64-x4gq-p99h.json
+++ b/advisories/github-reviewed/2021/03/GHSA-hf64-x4gq-p99h/GHSA-hf64-x4gq-p99h.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hf64-x4gq-p99h",
-  "modified": "2024-04-03T20:37:41Z",
+  "modified": "2024-10-08T13:05:15Z",
   "published": "2021-03-18T19:55:34Z",
   "aliases": [
     "CVE-2020-35655"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -25,7 +29,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "4.3.0"
             },
             {
               "fixed": "8.1.0"
@@ -48,6 +52,14 @@
       "type": "WEB",
       "url": "https://github.com/python-pillow/Pillow/commit/7e95c63fa7f503f185d3d9eb16b9cee1e54d1e46"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-hf64-x4gq-p99h"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-71.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/python-pillow/Pillow"