From 63948dd435a7b89c561b9f60737016fdb815aaa9 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 23 Sep 2024 17:01:36 +0000
Subject: [PATCH] Publish Advisories

GHSA-67j9-c52g-w2q9
GHSA-75cw-5cgv-g853
---
 .../GHSA-67j9-c52g-w2q9.json                  | 14 ++++++++++++-
 .../GHSA-75cw-5cgv-g853.json                  | 21 ++++++++++++-------
 2 files changed, 27 insertions(+), 8 deletions(-)

diff --git a/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json b/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json
index 6e4a61352b1..0c8b6ea7b04 100644
--- a/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json
+++ b/advisories/github-reviewed/2020/07/GHSA-67j9-c52g-w2q9/GHSA-67j9-c52g-w2q9.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-67j9-c52g-w2q9",
-  "modified": "2021-01-07T23:46:05Z",
+  "modified": "2024-09-23T17:00:56Z",
   "published": "2020-07-27T17:47:52Z",
   "aliases": [
     "CVE-2020-15120"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -47,6 +51,14 @@
     {
       "type": "WEB",
       "url": "https://github.com/spiral-project/ihatemoney/commit/8d77cf5d5646e1d2d8ded13f0660638f57e98471"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ihatemoney/PYSEC-2020-264.yaml"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/spiral-project/ihatemoney"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json b/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json
index e90cade2a53..aec04ca306f 100644
--- a/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json
+++ b/advisories/github-reviewed/2022/05/GHSA-75cw-5cgv-g853/GHSA-75cw-5cgv-g853.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-75cw-5cgv-g853",
-  "modified": "2024-04-29T11:32:35Z",
+  "modified": "2024-09-23T16:59:56Z",
   "published": "2022-05-14T02:05:20Z",
   "aliases": [
     "CVE-2014-3429"
@@ -9,7 +9,14 @@
   "summary": "IPython Notebook vulnerable to improper validation of the origin of websocket requests ",
   "details": "IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"
+    }
   ],
   "affected": [
     {
@@ -61,6 +68,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/ipython/ipython"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2014-21.yaml"
+    },
     {
       "type": "WEB",
       "url": "http://advisories.mageia.org/MGASA-2014-0320.html"
@@ -80,17 +91,13 @@
     {
       "type": "WEB",
       "url": "http://seclists.org/oss-sec/2014/q3/152"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:160"
     }
   ],
   "database_specific": {
     "cwe_ids": [
       "CWE-94"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-04-29T11:32:00Z",
     "nvd_published_at": "2014-08-07T11:13:00Z"