diff --git a/advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json b/advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json index 0e727b4a179..85b715fcae7 100644 --- a/advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json +++ b/advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-p6m5-h7pp-v2x5", - "modified": "2024-02-08T22:00:20Z", + "modified": "2024-05-22T19:06:34Z", "published": "2022-05-02T03:47:43Z", "aliases": [ "CVE-2009-3695" ], - "summary": "Django's Insufficient Algorithmic Complexity Causes Denial of Service", + "summary": "Django Regex Algorithmic Complexity Causes Denial of Service", "details": "Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.", "severity": [ @@ -22,7 +22,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.0" + "introduced": "1.0.0" }, { "fixed": "1.0.4" @@ -41,7 +41,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.1" + "introduced": "1.1.0" }, { "fixed": "1.1.1" @@ -56,6 +56,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3695" }, + { + "type": "WEB", + "url": "https://github.com/django/django/commit/594a28a9044120bed58671dde8a805c9e0f6c79a" + }, + { + "type": "WEB", + "url": "https://github.com/django/django/commit/e3e992e18b368fcd56aabafc1b5bf80a6e11b495" + }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53727" @@ -91,8 +99,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-400", - "CWE-407" + "CWE-1333", + "CWE-400" ], "severity": "MODERATE", "github_reviewed": true,