diff --git a/advisories/github-reviewed/2024/01/GHSA-4v98-7qmw-rqr8/GHSA-4v98-7qmw-rqr8.json b/advisories/github-reviewed/2024/01/GHSA-4v98-7qmw-rqr8/GHSA-4v98-7qmw-rqr8.json
new file mode 100644
index 00000000000..d73731b3930
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-4v98-7qmw-rqr8/GHSA-4v98-7qmw-rqr8.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4v98-7qmw-rqr8",
+  "modified": "2024-01-31T22:43:26Z",
+  "published": "2024-01-31T22:43:26Z",
+  "aliases": [
+    "CVE-2024-23652"
+  ],
+  "summary": "BuildKit vulnerable to possible host system access from mount stub cleaner",
+  "details": "### Impact\nA malicious BuildKit frontend or Dockerfile using `RUN --mount` could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing `RUN --mount` feature.\n\n### References\n\n",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/moby/buildkit"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.12.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/pull/4603"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/moby/buildkit"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-31T22:43:26Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/01/GHSA-9h6g-pr28-7cqp/GHSA-9h6g-pr28-7cqp.json b/advisories/github-reviewed/2024/01/GHSA-9h6g-pr28-7cqp/GHSA-9h6g-pr28-7cqp.json
new file mode 100644
index 00000000000..950a586b424
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-9h6g-pr28-7cqp/GHSA-9h6g-pr28-7cqp.json
@@ -0,0 +1,65 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9h6g-pr28-7cqp",
+  "modified": "2024-01-31T22:42:54Z",
+  "published": "2024-01-31T22:42:54Z",
+  "aliases": [
+
+  ],
+  "summary": "nodemailer ReDoS when trying to send a specially crafted email",
+  "details": "### Summary\nA ReDoS vulnerability occurs when nodemailer tries to parse img files with the parameter `attachDataUrls` set, causing the stuck of event loop. \nAnother flaw was found when nodemailer tries to parse an attachments with a embedded file, causing the stuck of event loop. \n\n### Details\n\nRegex: /^data:((?:[^;]*;)*(?:[^,]*)),(.*)$/\n\nPath: compile -> getAttachments -> _processDataUrl\n\nRegex: /(<img\\b[^>]* src\\s*=[\\s\"']*)(data:([^;]+);[^\"'>\\s]+)/\n\nPath: _convertDataImages\n\n### PoC\n\nhttps://gist.github.com/francoatmega/890dd5053375333e40c6fdbcc8c58df6\nhttps://gist.github.com/francoatmega/9aab042b0b24968d7b7039818e8b2698\n\n### Impact\n\nReDoS causes the event loop to stuck a specially crafted evil email can cause this problem.\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "nodemailer"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "6.9.8"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-9h6g-pr28-7cqp"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/francoatmega/890dd5053375333e40c6fdbcc8c58df6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/francoatmega/9aab042b0b24968d7b7039818e8b2698"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/nodemailer/nodemailer"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1333"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-31T22:42:54Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/01/GHSA-9xc9-xq7w-vpcr/GHSA-9xc9-xq7w-vpcr.json b/advisories/github-reviewed/2024/01/GHSA-9xc9-xq7w-vpcr/GHSA-9xc9-xq7w-vpcr.json
new file mode 100644
index 00000000000..e1197d816f1
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-9xc9-xq7w-vpcr/GHSA-9xc9-xq7w-vpcr.json
@@ -0,0 +1,65 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9xc9-xq7w-vpcr",
+  "modified": "2024-01-31T22:43:09Z",
+  "published": "2024-01-31T09:30:18Z",
+  "aliases": [
+    "CVE-2023-44313"
+  ],
+  "summary": "Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability",
+  "details": "Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/apache/servicecomb-service-center"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.2.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44313"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/servicecomb-service-center"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2024/01/31/4"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-918"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-31T22:43:09Z",
+    "nvd_published_at": "2024-01-31T09:15:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/01/GHSA-m3r6-h7wv-7xxv/GHSA-m3r6-h7wv-7xxv.json b/advisories/github-reviewed/2024/01/GHSA-m3r6-h7wv-7xxv/GHSA-m3r6-h7wv-7xxv.json
new file mode 100644
index 00000000000..d61f43fe0e7
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-m3r6-h7wv-7xxv/GHSA-m3r6-h7wv-7xxv.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m3r6-h7wv-7xxv",
+  "modified": "2024-01-31T22:43:32Z",
+  "published": "2024-01-31T22:43:32Z",
+  "aliases": [
+    "CVE-2024-23651"
+  ],
+  "summary": "BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts",
+  "details": "### Impact\nTwo malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with `--mount=type=cache,source=...` options.\n\n### References\nhttps://www.openwall.com/lists/oss-security/2019/05/28/1\n",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/moby/buildkit"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.12.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/pull/4604"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/moby/buildkit"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-31T22:43:32Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/01/GHSA-r8xp-52mq-rmm8/GHSA-r8xp-52mq-rmm8.json b/advisories/github-reviewed/2024/01/GHSA-r8xp-52mq-rmm8/GHSA-r8xp-52mq-rmm8.json
new file mode 100644
index 00000000000..eb444aae6fe
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-r8xp-52mq-rmm8/GHSA-r8xp-52mq-rmm8.json
@@ -0,0 +1,65 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r8xp-52mq-rmm8",
+  "modified": "2024-01-31T22:43:05Z",
+  "published": "2024-01-31T09:30:18Z",
+  "aliases": [
+    "CVE-2023-44312"
+  ],
+  "summary": "Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability",
+  "details": "Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center. This issue affects Apache ServiceComb Service-Center before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/apache/servicecomb-service-center"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.2.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44312"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/servicecomb-service-center"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2024/01/31/5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-31T22:43:05Z",
+    "nvd_published_at": "2024-01-31T09:15:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/01/GHSA-wr6v-9f75-vh2g/GHSA-wr6v-9f75-vh2g.json b/advisories/github-reviewed/2024/01/GHSA-wr6v-9f75-vh2g/GHSA-wr6v-9f75-vh2g.json
new file mode 100644
index 00000000000..9a061cfabb7
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-wr6v-9f75-vh2g/GHSA-wr6v-9f75-vh2g.json
@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wr6v-9f75-vh2g",
+  "modified": "2024-01-31T22:43:20Z",
+  "published": "2024-01-31T22:43:20Z",
+  "aliases": [
+    "CVE-2024-23653"
+  ],
+  "summary": "Buildkit's interactive containers API does not validate entitlements check",
+  "details": "### Impact\nIn addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request.\n\n### Patches\nThe issue has been fixed in v0.12.5 .\n\n### Workarounds\nAvoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command.\n\n### References\n\n",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/moby/buildkit"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.12.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/pull/4602"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/moby/buildkit"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-31T22:43:20Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-9xc9-xq7w-vpcr/GHSA-9xc9-xq7w-vpcr.json b/advisories/unreviewed/2024/01/GHSA-9xc9-xq7w-vpcr/GHSA-9xc9-xq7w-vpcr.json
deleted file mode 100644
index d60efd19d45..00000000000
--- a/advisories/unreviewed/2024/01/GHSA-9xc9-xq7w-vpcr/GHSA-9xc9-xq7w-vpcr.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-9xc9-xq7w-vpcr",
-  "modified": "2024-01-31T09:30:18Z",
-  "published": "2024-01-31T09:30:18Z",
-  "aliases": [
-    "CVE-2023-44313"
-  ],
-  "details": "Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include).\n\nUsers are recommended to upgrade to version 2.2.0, which fixes the issue.\n\n",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"
-    }
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44313"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-918"
-    ],
-    "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-01-31T09:15:43Z"
-  }
-}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-r8xp-52mq-rmm8/GHSA-r8xp-52mq-rmm8.json b/advisories/unreviewed/2024/01/GHSA-r8xp-52mq-rmm8/GHSA-r8xp-52mq-rmm8.json
deleted file mode 100644
index 06d8ffd879d..00000000000
--- a/advisories/unreviewed/2024/01/GHSA-r8xp-52mq-rmm8/GHSA-r8xp-52mq-rmm8.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-r8xp-52mq-rmm8",
-  "modified": "2024-01-31T09:30:18Z",
-  "published": "2024-01-31T09:30:18Z",
-  "aliases": [
-    "CVE-2023-44312"
-  ],
-  "details": "Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects \n\nApache ServiceComb Service-Center\n\n before 2.1.0 (include).\n\nUsers are recommended to upgrade to version 2.2.0, which fixes the issue.\n\n",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"
-    }
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44312"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-200"
-    ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-01-31T09:15:43Z"
-  }
-}
\ No newline at end of file