diff --git a/advisories/github-reviewed/2023/06/GHSA-5wfc-hjrc-gq87/GHSA-5wfc-hjrc-gq87.json b/advisories/github-reviewed/2023/06/GHSA-5wfc-hjrc-gq87/GHSA-5wfc-hjrc-gq87.json index 33f2b84f8ef..dd5e61c0b59 100644 --- a/advisories/github-reviewed/2023/06/GHSA-5wfc-hjrc-gq87/GHSA-5wfc-hjrc-gq87.json +++ b/advisories/github-reviewed/2023/06/GHSA-5wfc-hjrc-gq87/GHSA-5wfc-hjrc-gq87.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5wfc-hjrc-gq87", - "modified": "2023-06-14T21:15:53Z", + "modified": "2023-06-27T20:20:39Z", "published": "2023-06-14T15:30:38Z", "aliases": [ "CVE-2023-34620" @@ -9,7 +9,10 @@ "summary": "hjson stack exhaustion vulnerability", "details": "An issue was discovered hjson through 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted objects that deeply nested structures.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ { @@ -44,9 +47,10 @@ ], "database_specific": { "cwe_ids": [ - "CWE-400" + "CWE-400", + "CWE-787" ], - "severity": "LOW", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-06-14T20:38:48Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2023/06/GHSA-xc8m-28vv-4pjc/GHSA-xc8m-28vv-4pjc.json b/advisories/github-reviewed/2023/06/GHSA-xc8m-28vv-4pjc/GHSA-xc8m-28vv-4pjc.json index c9556b98276..d3b1f4f7c9d 100644 --- a/advisories/github-reviewed/2023/06/GHSA-xc8m-28vv-4pjc/GHSA-xc8m-28vv-4pjc.json +++ b/advisories/github-reviewed/2023/06/GHSA-xc8m-28vv-4pjc/GHSA-xc8m-28vv-4pjc.json @@ -128,6 +128,10 @@ { "type": "WEB", "url": "https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/" } ], "database_specific": {