Publish GHSA-p6m5-h7pp-v2x5

advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p6m5-h7pp-v2x5",
-  "modified": "2024-02-08T22:00:20Z",
+  "modified": "2024-05-22T19:06:34Z",
   "published": "2022-05-02T03:47:43Z",
   "aliases": [
     "CVE-2009-3695"
   ],
-  "summary": "Django's Insufficient Algorithmic Complexity Causes Denial of Service",
+  "summary": "Django Regex Algorithmic Complexity Causes Denial of Service",
   "details": "Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.",
   "severity": [
 
@@ -22,7 +22,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "1.0"
+              "introduced": "1.0.0"
             },
             {
               "fixed": "1.0.4"
@@ -41,7 +41,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "1.1"
+              "introduced": "1.1.0"
             },
             {
               "fixed": "1.1.1"
@@ -56,6 +56,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3695"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/django/django/commit/594a28a9044120bed58671dde8a805c9e0f6c79a"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/django/django/commit/e3e992e18b368fcd56aabafc1b5bf80a6e11b495"
+    },
     {
       "type": "WEB",
       "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53727"
@@ -91,8 +99,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-400",
-      "CWE-407"
+      "CWE-1333",
+      "CWE-400"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,