diff --git a/advisories/github-reviewed/2025/03/GHSA-4vc4-m8qh-g8jm/GHSA-4vc4-m8qh-g8jm.json b/advisories/github-reviewed/2025/03/GHSA-4vc4-m8qh-g8jm/GHSA-4vc4-m8qh-g8jm.json index a01dff7afce..f2b0a5cd65f 100644 --- a/advisories/github-reviewed/2025/03/GHSA-4vc4-m8qh-g8jm/GHSA-4vc4-m8qh-g8jm.json +++ b/advisories/github-reviewed/2025/03/GHSA-4vc4-m8qh-g8jm/GHSA-4vc4-m8qh-g8jm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4vc4-m8qh-g8jm", - "modified": "2025-03-12T20:20:25Z", + "modified": "2025-03-12T21:36:50Z", "published": "2025-03-12T20:20:24Z", "aliases": [ "CVE-2025-25291" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P" } ], "affected": [ @@ -59,13 +59,41 @@ "type": "WEB", "url": "https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-4vc4-m8qh-g8jm" }, + { + "type": "WEB", + "url": "https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25291" + }, + { + "type": "WEB", + "url": "https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9" + }, { "type": "WEB", "url": "https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97" }, + { + "type": "WEB", + "url": "https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released" + }, + { + "type": "WEB", + "url": "https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials" + }, { "type": "PACKAGE", "url": "https://github.com/SAML-Toolkits/ruby-saml" + }, + { + "type": "WEB", + "url": "https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4" + }, + { + "type": "WEB", + "url": "https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0" } ], "database_specific": { @@ -76,6 +104,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2025-03-12T20:20:24Z", - "nvd_published_at": null + "nvd_published_at": "2025-03-12T21:15:42Z" } } \ No newline at end of file