Publish Advisories

GHSA-x9xw-47w2-f9fq
GHSA-g35q-hm7c-4v7x

advisories/unreviewed/2023/11/GHSA-x9xw-47w2-f9fq/GHSA-x9xw-47w2-f9fq.json

@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-284"
+      "CWE-284",
+      "CWE-359"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,

advisories/unreviewed/2024/09/GHSA-g35q-hm7c-4v7x/GHSA-g35q-hm7c-4v7x.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g35q-hm7c-4v7x",
+  "modified": "2024-09-06T03:31:29Z",
+  "published": "2024-09-06T03:31:29Z",
+  "aliases": [
+    "CVE-2024-40865"
+  ],
+  "details": "The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40865"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.apple.com/en-us/120915"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-09-06T02:15:02Z"
+  }
+}