From 5951368487dc104cc2b1eeb60592d47b1beee702 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 3 Oct 2023 20:28:49 +0000
Subject: [PATCH] Publish GHSA-j7hp-h8jx-5ppr

---
 .../GHSA-j7hp-h8jx-5ppr.json                  | 72 +++++++++++++++++++
 1 file changed, 72 insertions(+)

diff --git a/advisories/github-reviewed/2023/09/GHSA-j7hp-h8jx-5ppr/GHSA-j7hp-h8jx-5ppr.json b/advisories/github-reviewed/2023/09/GHSA-j7hp-h8jx-5ppr/GHSA-j7hp-h8jx-5ppr.json
index 9994c1d8840..b382bf4a5e7 100644
--- a/advisories/github-reviewed/2023/09/GHSA-j7hp-h8jx-5ppr/GHSA-j7hp-h8jx-5ppr.json
+++ b/advisories/github-reviewed/2023/09/GHSA-j7hp-h8jx-5ppr/GHSA-j7hp-h8jx-5ppr.json
@@ -227,6 +227,54 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "Pillow"
+      },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "10.0.1"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "webp"
+      },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.2.6"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [
@@ -254,10 +302,22 @@
       "type": "WEB",
       "url": "https://github.com/electron/electron/pull/39828"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jaredforth/webp/pull/30"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/python-pillow/Pillow/pull/7395"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/qnighy/libwebp-sys2-rs/pull/21"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jaredforth/webp/commit/9d4c56e63abecc777df71c702503c3eaabd7dcbc"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/qnighy/libwebp-sys2-rs/commit/4560c473a76ec8bd8c650f19ddf9d7a44f719f8b"
@@ -334,6 +394,10 @@
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/"
+    },
     {
       "type": "WEB",
       "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863"
@@ -342,6 +406,10 @@
       "type": "WEB",
       "url": "https://news.ycombinator.com/item?id=37478403"
     },
+    {
+      "type": "WEB",
+      "url": "https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html#security"
+    },
     {
       "type": "WEB",
       "url": "https://rustsec.org/advisories/RUSTSEC-2023-0060.html"
@@ -358,6 +426,10 @@
       "type": "WEB",
       "url": "https://security.gentoo.org/glsa/202309-05"
     },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20230929-0011/"
+    },
     {
       "type": "WEB",
       "url": "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/"