diff --git a/advisories/github-reviewed/2019/12/GHSA-w457-6q6x-cgp9/GHSA-w457-6q6x-cgp9.json b/advisories/github-reviewed/2019/12/GHSA-w457-6q6x-cgp9/GHSA-w457-6q6x-cgp9.json index ca0f7da5c16..065a0dfcb7d 100644 --- a/advisories/github-reviewed/2019/12/GHSA-w457-6q6x-cgp9/GHSA-w457-6q6x-cgp9.json +++ b/advisories/github-reviewed/2019/12/GHSA-w457-6q6x-cgp9/GHSA-w457-6q6x-cgp9.json @@ -30,7 +30,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "4.0.0" }, { "fixed": "4.3.0" @@ -38,6 +38,44 @@ ] } ] + }, + { + "package": { + "ecosystem": "RubyGems", + "name": "bootstrap-wysihtml5-rails" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0.3.3.5" + }, + { + "last_affected": "0.3.3.8" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "npm", + "name": "handlebars" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.0.8" + } + ] + } + ] } ], "references": [ @@ -49,6 +87,14 @@ "type": "WEB", "url": "https://github.com/wycats/handlebars.js/issues/1558" }, + { + "type": "WEB", + "url": "https://github.com/handlebars-lang/handlebars.js/commit/156061eb7707575293613d7fdf90e2bdaac029ee" + }, + { + "type": "WEB", + "url": "https://github.com/handlebars-lang/handlebars.js/commit/90ad8d97ad2933852fb83fcc054699dc99e094db" + }, { "type": "WEB", "url": "https://github.com/wycats/handlebars.js/commit/2078c727c627f25d4a149962f05c1e069beb18bc" @@ -58,12 +104,20 @@ "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19919" }, { - "type": "PACKAGE", - "url": "https://github.com/wycats/handlebars.js" + "type": "WEB", + "url": "https://github.com/Nerian/bootstrap-wysihtml5-rails/blob/master/vendor/assets/javascripts/bootstrap-wysihtml5/handlebars.runtime.min.js" }, { "type": "WEB", - "url": "https://www.npmjs.com/advisories/1164" + "url": "https://github.com/Nerian/bootstrap-wysihtml5-rails/tree/master/vendor/assets/javascripts/bootstrap-wysihtml5" + }, + { + "type": "WEB", + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-wysihtml5-rails/CVE-2019-19919.yml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/wycats/handlebars.js" }, { "type": "WEB",