From 5a1d28d02ef53ae76092c71d1ce346120b8542cf Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 5 Feb 2024 10:41:21 +0000 Subject: [PATCH] Publish Advisories GHSA-cg8j-8w52-735v GHSA-g97c-jfx6-xvxh --- .../GHSA-cg8j-8w52-735v.json | 60 ++---- .../GHSA-g97c-jfx6-xvxh.json | 182 +++++++++++++++++- 2 files changed, 194 insertions(+), 48 deletions(-) diff --git a/advisories/github-reviewed/2019/11/GHSA-cg8j-8w52-735v/GHSA-cg8j-8w52-735v.json b/advisories/github-reviewed/2019/11/GHSA-cg8j-8w52-735v/GHSA-cg8j-8w52-735v.json index 3e09915a409..94c42957f47 100644 --- a/advisories/github-reviewed/2019/11/GHSA-cg8j-8w52-735v/GHSA-cg8j-8w52-735v.json +++ b/advisories/github-reviewed/2019/11/GHSA-cg8j-8w52-735v/GHSA-cg8j-8w52-735v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cg8j-8w52-735v", - "modified": "2021-12-03T14:39:16Z", + "modified": "2024-02-05T10:39:45Z", "published": "2019-11-12T23:01:25Z", "aliases": [ "CVE-2019-12204" @@ -18,17 +18,17 @@ { "package": { "ecosystem": "Packagist", - "name": "silverstripe/framework" + "name": "silverstripe/cms" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "4.4.0" }, { - "fixed": "4.3.6" + "fixed": "4.4.4" } ] } @@ -44,48 +44,10 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "4.4.0" + "introduced": "4.1.0" }, { - "fixed": "4.4.4" - } - ] - } - ] - }, - { - "package": { - "ecosystem": "Packagist", - "name": "silverstripe/cms" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "fixed": "4.3.6" - } - ] - } - ] - }, - { - "package": { - "ecosystem": "Packagist", - "name": "silverstripe/cms" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "4.4.0" - }, - { - "fixed": "4.4.4" + "fixed": "4.3.5" } ] } @@ -101,6 +63,10 @@ "type": "WEB", "url": "https://forum.silverstripe.org/c/releases" }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-12204.yaml" + }, { "type": "WEB", "url": "https://packagist.org/packages/silverstripe/cms" @@ -116,6 +82,10 @@ { "type": "WEB", "url": "https://www.silverstripe.org/download/security-releases/CVE-2019-12204" + }, + { + "type": "WEB", + "url": "https://www.silverstripe.org/download/security-releases/cve-2019-12204/" } ], "database_specific": { @@ -125,6 +95,6 @@ "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2019-10-01T18:05:09Z", - "nvd_published_at": null + "nvd_published_at": "2019-09-25T19:15:10Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-g97c-jfx6-xvxh/GHSA-g97c-jfx6-xvxh.json b/advisories/github-reviewed/2022/05/GHSA-g97c-jfx6-xvxh/GHSA-g97c-jfx6-xvxh.json index 39f267ec97b..c0942d42cca 100644 --- a/advisories/github-reviewed/2022/05/GHSA-g97c-jfx6-xvxh/GHSA-g97c-jfx6-xvxh.json +++ b/advisories/github-reviewed/2022/05/GHSA-g97c-jfx6-xvxh/GHSA-g97c-jfx6-xvxh.json @@ -41,7 +41,45 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.6.0" + "introduced": "2.7.0" + }, + { + "fixed": "2.7.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.3.0" + }, + { + "fixed": "2.3.35" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.4.0" }, { "fixed": "2.6.12" @@ -50,6 +88,120 @@ } ] }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/form" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.4.0" + }, + { + "fixed": "2.6.12" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security-http" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.3.0" + }, + { + "fixed": "2.3.35" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.4.0" + }, + { + "fixed": "2.6.12" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.7.0" + }, + { + "fixed": "2.7.7" + } + ] + } + ] + }, { "package": { "ecosystem": "Packagist", @@ -60,10 +212,10 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.7.0" + "introduced": "2.4.0" }, { - "fixed": "2.7.7" + "fixed": "2.6.12" } ] } @@ -79,10 +231,30 @@ "type": "WEB", "url": "https://github.com/symfony/symfony/pull/16630" }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/form/CVE-2015-8125.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2015-8125.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2015-8125.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2015-8125.yaml" + }, { "type": "WEB", "url": "https://symfony.com/blog/cve-2015-8125-potential-remote-timing-attack-vulnerability-in-security-remember-me-service" }, + { + "type": "WEB", + "url": "https://symfony.com/cve-2015-8125" + }, { "type": "WEB", "url": "https://web.archive.org/web/20200228050051/http://www.securityfocus.com/bid/77692" @@ -98,6 +270,10 @@ { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3402" + }, + { + "type": "WEB", + "url": "http://www.securityfocus.com/bid/77692" } ], "database_specific": {