From 5c26b6b5200f3834076f45a78d29c4565b73e57a Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 30 Sep 2024 16:53:54 +0000 Subject: [PATCH] Publish Advisories GHSA-jx7v-gmqc-6xrj GHSA-2jg5-xgvv-4wq7 --- .../05/GHSA-jx7v-gmqc-6xrj/GHSA-jx7v-gmqc-6xrj.json | 10 +++++++++- .../04/GHSA-2jg5-xgvv-4wq7/GHSA-2jg5-xgvv-4wq7.json | 12 ++++++++++-- 2 files changed, 19 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-jx7v-gmqc-6xrj/GHSA-jx7v-gmqc-6xrj.json b/advisories/github-reviewed/2022/05/GHSA-jx7v-gmqc-6xrj/GHSA-jx7v-gmqc-6xrj.json index 282e3abdc28..9649f323421 100644 --- a/advisories/github-reviewed/2022/05/GHSA-jx7v-gmqc-6xrj/GHSA-jx7v-gmqc-6xrj.json +++ b/advisories/github-reviewed/2022/05/GHSA-jx7v-gmqc-6xrj/GHSA-jx7v-gmqc-6xrj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jx7v-gmqc-6xrj", - "modified": "2024-04-29T10:21:23Z", + "modified": "2024-09-30T16:53:20Z", "published": "2022-05-24T17:11:21Z", "aliases": [ "CVE-2020-9543" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ @@ -90,6 +94,10 @@ "type": "PACKAGE", "url": "https://github.com/openstack/manila" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/manila/PYSEC-2020-63.yaml" + }, { "type": "WEB", "url": "https://opendev.org/openstack/manila/commit/947315f0903c823b0fdd9d99c60078814587272c" diff --git a/advisories/github-reviewed/2023/04/GHSA-2jg5-xgvv-4wq7/GHSA-2jg5-xgvv-4wq7.json b/advisories/github-reviewed/2023/04/GHSA-2jg5-xgvv-4wq7/GHSA-2jg5-xgvv-4wq7.json index 637fc1cbb02..386d15fd795 100644 --- a/advisories/github-reviewed/2023/04/GHSA-2jg5-xgvv-4wq7/GHSA-2jg5-xgvv-4wq7.json +++ b/advisories/github-reviewed/2023/04/GHSA-2jg5-xgvv-4wq7/GHSA-2jg5-xgvv-4wq7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2jg5-xgvv-4wq7", - "modified": "2023-04-25T21:00:01Z", + "modified": "2024-09-30T16:52:42Z", "published": "2023-04-15T21:30:16Z", "aliases": [ "CVE-2021-34337" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -40,6 +44,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34337" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mailman/PYSEC-2023-22.yaml" + }, { "type": "PACKAGE", "url": "https://gitlab.com/mailman/mailman" @@ -61,7 +69,7 @@ "cwe_ids": [ "CWE-208" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-04-18T13:05:08Z", "nvd_published_at": "2023-04-15T20:16:00Z"