Publish GHSA-qcx4-gfh8-w5p5

advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qcx4-gfh8-w5p5",
-  "modified": "2025-04-04T19:54:14Z",
+  "modified": "2025-04-04T20:28:34Z",
   "published": "2022-05-24T16:46:16Z",
   "aliases": [
     "CVE-2019-12277"
   ],
   "summary": "Blogifier does not properly restrict APIs",
-  "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.",
+  "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.\n\nThe issue is patched in the `2.4` branch, but `2.5.5` is the lowest available patched version on https://www.nuget.org/packages/Blogifier.Core.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -28,11 +28,14 @@
               "introduced": "0"
             },
             {
-              "fixed": "2.4"
+              "fixed": "2.5.5"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "< 2.4"
+      }
     }
   ],
   "references": [