From 6d9abf102ef915ca74d53a979487edc77695950b Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 22:26:48 +0000 Subject: [PATCH] Publish Advisories GHSA-p5xh-vx83-mxcj GHSA-3gqj-cmxr-p4x2 --- .../GHSA-p5xh-vx83-mxcj.json | 24 +++++++++++++------ .../GHSA-3gqj-cmxr-p4x2.json | 10 +++++++- 2 files changed, 26 insertions(+), 8 deletions(-) diff --git a/advisories/github-reviewed/2020/03/GHSA-p5xh-vx83-mxcj/GHSA-p5xh-vx83-mxcj.json b/advisories/github-reviewed/2020/03/GHSA-p5xh-vx83-mxcj/GHSA-p5xh-vx83-mxcj.json index 36fc22ba70d..0578e9bd98c 100644 --- a/advisories/github-reviewed/2020/03/GHSA-p5xh-vx83-mxcj/GHSA-p5xh-vx83-mxcj.json +++ b/advisories/github-reviewed/2020/03/GHSA-p5xh-vx83-mxcj/GHSA-p5xh-vx83-mxcj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-p5xh-vx83-mxcj", - "modified": "2022-03-23T23:12:13Z", + "modified": "2024-11-18T22:24:59Z", "published": "2020-03-31T15:40:12Z", "aliases": [ "CVE-2020-10109" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,12 +24,6 @@ "ecosystem": "PyPI", "name": "Twisted" }, - "ecosystem_specific": { - "affected_functions": [ - "twisted.web.http.HTTPChannel", - "twisted.web.http.HTTPChannel.headerReceived" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -50,6 +48,14 @@ "type": "WEB", "url": "https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-p5xh-vx83-mxcj" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2020-260.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/twisted/twisted" @@ -58,6 +64,10 @@ "type": "WEB", "url": "https://github.com/twisted/twisted/blob/6ff2c40e42416c83203422ff70dfc49d2681c8e2/NEWS.rst#twisted-2030-2020-03-13" }, + { + "type": "WEB", + "url": "https://know.bishopfox.com/advisories" + }, { "type": "WEB", "url": "https://know.bishopfox.com/advisories/twisted-version-19.10.0" diff --git a/advisories/github-reviewed/2021/04/GHSA-3gqj-cmxr-p4x2/GHSA-3gqj-cmxr-p4x2.json b/advisories/github-reviewed/2021/04/GHSA-3gqj-cmxr-p4x2/GHSA-3gqj-cmxr-p4x2.json index 362c4a309e1..383a30bbffd 100644 --- a/advisories/github-reviewed/2021/04/GHSA-3gqj-cmxr-p4x2/GHSA-3gqj-cmxr-p4x2.json +++ b/advisories/github-reviewed/2021/04/GHSA-3gqj-cmxr-p4x2/GHSA-3gqj-cmxr-p4x2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3gqj-cmxr-p4x2", - "modified": "2023-09-01T10:15:02Z", + "modified": "2024-11-18T22:24:19Z", "published": "2021-04-30T17:32:28Z", "aliases": [ "CVE-2016-1000111" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -40,6 +44,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1000111" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2020-214.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/twisted/twisted"