From 6ac9e7fae5dd7ad61d92410a41262ac18f61b71a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 1 Oct 2024 19:31:37 +0000
Subject: [PATCH] Publish Advisories

GHSA-6m53-c78q-7qmg
GHSA-gcx2-gvj7-pxv3
GHSA-x456-3ccm-m6j4
---
 .../GHSA-6m53-c78q-7qmg/GHSA-6m53-c78q-7qmg.json | 16 ++++++++++++++--
 .../GHSA-gcx2-gvj7-pxv3/GHSA-gcx2-gvj7-pxv3.json | 10 +++++++++-
 .../GHSA-x456-3ccm-m6j4/GHSA-x456-3ccm-m6j4.json |  8 ++++++--
 3 files changed, 29 insertions(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2018/07/GHSA-6m53-c78q-7qmg/GHSA-6m53-c78q-7qmg.json b/advisories/github-reviewed/2018/07/GHSA-6m53-c78q-7qmg/GHSA-6m53-c78q-7qmg.json
index 11a9f3f1ad2..fd88b22499d 100644
--- a/advisories/github-reviewed/2018/07/GHSA-6m53-c78q-7qmg/GHSA-6m53-c78q-7qmg.json
+++ b/advisories/github-reviewed/2018/07/GHSA-6m53-c78q-7qmg/GHSA-6m53-c78q-7qmg.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6m53-c78q-7qmg",
-  "modified": "2022-04-26T18:21:25Z",
+  "modified": "2024-10-01T19:29:59Z",
   "published": "2018-07-31T18:18:19Z",
   "aliases": [
     "CVE-2018-14505"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -48,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/mitmproxy/mitmproxy/pull/3243"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mitmproxy/mitmproxy/commit/7f464b89296881f4d9ec032378c4418e832d17e3"
+    },
     {
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-6m53-c78q-7qmg"
@@ -55,13 +63,17 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/mitmproxy/mitmproxy"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2018-56.yaml"
     }
   ],
   "database_specific": {
     "cwe_ids": [
       "CWE-20"
     ],
-    "severity": "HIGH",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2020-06-16T21:19:42Z",
     "nvd_published_at": null
diff --git a/advisories/github-reviewed/2022/03/GHSA-gcx2-gvj7-pxv3/GHSA-gcx2-gvj7-pxv3.json b/advisories/github-reviewed/2022/03/GHSA-gcx2-gvj7-pxv3/GHSA-gcx2-gvj7-pxv3.json
index 50a4c95a441..48a3d300852 100644
--- a/advisories/github-reviewed/2022/03/GHSA-gcx2-gvj7-pxv3/GHSA-gcx2-gvj7-pxv3.json
+++ b/advisories/github-reviewed/2022/03/GHSA-gcx2-gvj7-pxv3/GHSA-gcx2-gvj7-pxv3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gcx2-gvj7-pxv3",
-  "modified": "2022-03-22T19:22:59Z",
+  "modified": "2024-10-01T19:30:26Z",
   "published": "2022-03-22T19:22:59Z",
   "aliases": [
     "CVE-2022-24766"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -58,6 +62,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/mitmproxy/mitmproxy"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2022-170.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://mitmproxy.org/posts/releases/mitmproxy8"
diff --git a/advisories/github-reviewed/2023/07/GHSA-x456-3ccm-m6j4/GHSA-x456-3ccm-m6j4.json b/advisories/github-reviewed/2023/07/GHSA-x456-3ccm-m6j4/GHSA-x456-3ccm-m6j4.json
index f7e26ed5d2f..065724db26e 100644
--- a/advisories/github-reviewed/2023/07/GHSA-x456-3ccm-m6j4/GHSA-x456-3ccm-m6j4.json
+++ b/advisories/github-reviewed/2023/07/GHSA-x456-3ccm-m6j4/GHSA-x456-3ccm-m6j4.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x456-3ccm-m6j4",
-  "modified": "2023-07-05T21:35:54Z",
+  "modified": "2024-10-01T19:29:06Z",
   "published": "2023-07-05T21:35:54Z",
   "aliases": [
     "CVE-2023-34457"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -65,7 +69,7 @@
     "cwe_ids": [
       "CWE-20"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-07-05T21:35:54Z",
     "nvd_published_at": "2023-07-05T20:15:10Z"