netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-844w-j86r-4x2j
GHSA-p8pc-3f7w-jr5q
GHSA-pmvv-57rg-5g86
This commit is contained in:
advisory-database[bot]
2024-10-28 14:45:50 +00:00
parent a9a7c2fce7
commit 62e00a14bc
3 changed files with 78 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2019/12/GHSA-844w-j86r-4x2j/GHSA-844w-j86r-4x2j.json
+20 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-844w-j86r-4x2j",
"modified": "2021-11-01T14:12:42Z",
"modified": "2024-10-28T14:44:38Z",
"published": "2019-12-16T20:17:10Z",
"aliases": [
"CVE-2019-16778"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -28,7 +32,7 @@
"introduced": "0"
},
{
"fixed": "1.15"
"fixed": "1.15.0"
}
]
}
@@ -47,7 +51,7 @@
"introduced": "0"
},
{
"fixed": "1.15"
"fixed": "1.15.0"
}
]
}
@@ -66,7 +70,7 @@
"introduced": "0"
},
{
"fixed": "1.15"
"fixed": "1.15.0"
}
]
}
@@ -86,6 +90,18 @@
"type": "WEB",
"url": "https://github.com/tensorflow/tensorflow/commit/db4f9717c41bccc3ce10099ab61996b246099892"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-227.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-234.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-209.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/tensorflow/tensorflow"
advisories/unreviewed/2024/10/GHSA-p8pc-3f7w-jr5q/GHSA-p8pc-3f7w-jr5q.json → advisories/github-reviewed/2024/10/GHSA-p8pc-3f7w-jr5q/GHSA-p8pc-3f7w-jr5q.json
+29 -6
View File
@@ -1,20 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p8pc-3f7w-jr5q",
"modified": "2024-10-26T21:30:46Z",
"modified": "2024-10-28T14:44:05Z",
"published": "2024-10-26T21:30:46Z",
"aliases": [
"CVE-2020-26304"
],
"summary": "Foundation Regular Expression Denial of Service vulnerability",
"details": "Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green"
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "foundation-sites"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.3.3"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/foundation/foundation-sites/issues/12180"
},
{
"type": "PACKAGE",
"url": "https://github.com/foundation/foundation-sites"
},
{
"type": "ADVISORY",
"url": "https://securitylab.github.com/advisories/GHSL-2020-290-redos-foundation-sites"
@@ -34,9 +57,9 @@
"cwe_ids": [
"CWE-1333"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-10-28T14:44:05Z",
"nvd_published_at": "2024-10-26T21:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-pmvv-57rg-5g86/GHSA-pmvv-57rg-5g86.json → advisories/github-reviewed/2024/10/GHSA-pmvv-57rg-5g86/GHSA-pmvv-57rg-5g86.json
+29 -6
View File
@@ -1,20 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pmvv-57rg-5g86",
"modified": "2024-10-26T21:30:46Z",
"modified": "2024-10-28T14:44:58Z",
"published": "2024-10-26T21:30:46Z",
"aliases": [
"CVE-2020-26305"
],
"summary": "CommonRegexJS Regular Expression Denial of Service vulnerability",
"details": "CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green"
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "commonregex"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.3.1"
}
]
}
]
}
],
"references": [
{
@@ -25,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/talyssonoc/CommonRegexJS/issues/4"
},
{
"type": "PACKAGE",
"url": "https://github.com/talyssonoc/CommonRegexJS"
},
{
"type": "ADVISORY",
"url": "https://securitylab.github.com/advisories/GHSL-2020-291-redos-CommonRegexJS"
@@ -34,9 +57,9 @@
"cwe_ids": [
"CWE-1333"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-10-28T14:44:58Z",
"nvd_published_at": "2024-10-26T21:15:13Z"
}
}