diff --git a/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json b/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json index 6e4a61352b1..0c8b6ea7b04 100644 --- a/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json +++ b/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-67j9-c52g-w2q9", - "modified": "2021-01-07T23:46:05Z", + "modified": "2024-09-23T17:00:56Z", "published": "2020-07-27T17:47:52Z", "aliases": [ "CVE-2020-15120" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -47,6 +51,14 @@ { "type": "WEB", "url": "https://github.com/spiral-project/ihatemoney/commit/8d77cf5d5646e1d2d8ded13f0660638f57e98471" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ihatemoney/PYSEC-2020-264.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/spiral-project/ihatemoney" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json b/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json index e90cade2a53..aec04ca306f 100644 --- a/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json +++ b/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-75cw-5cgv-g853", - "modified": "2024-04-29T11:32:35Z", + "modified": "2024-09-23T16:59:56Z", "published": "2022-05-14T02:05:20Z", "aliases": [ "CVE-2014-3429" @@ -9,7 +9,14 @@ "summary": "IPython Notebook vulnerable to improper validation of the origin of websocket requests ", "details": "IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { @@ -61,6 +68,10 @@ "type": "PACKAGE", "url": "https://github.com/ipython/ipython" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2014-21.yaml" + }, { "type": "WEB", "url": "http://advisories.mageia.org/MGASA-2014-0320.html" @@ -80,17 +91,13 @@ { "type": "WEB", "url": "http://seclists.org/oss-sec/2014/q3/152" - }, - { - "type": "WEB", - "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:160" } ], "database_specific": { "cwe_ids": [ "CWE-94" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-04-29T11:32:00Z", "nvd_published_at": "2014-08-07T11:13:00Z"