From 78dc5b2de789a73c628f26e3bc2383cb2141d9f4 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 4 Apr 2025 20:30:33 +0000
Subject: [PATCH] Publish GHSA-qcx4-gfh8-w5p5

---
 .../05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json   | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json b/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json
index 41deb9b982e..7d6dfdc9efb 100644
--- a/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json
+++ b/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qcx4-gfh8-w5p5",
-  "modified": "2025-04-04T19:54:14Z",
+  "modified": "2025-04-04T20:28:34Z",
   "published": "2022-05-24T16:46:16Z",
   "aliases": [
     "CVE-2019-12277"
   ],
   "summary": "Blogifier does not properly restrict APIs",
-  "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.",
+  "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.\n\nThe issue is patched in the `2.4` branch, but `2.5.5` is the lowest available patched version on https://www.nuget.org/packages/Blogifier.Core.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -28,11 +28,14 @@
               "introduced": "0"
             },
             {
-              "fixed": "2.4"
+              "fixed": "2.5.5"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "< 2.4"
+      }
     }
   ],
   "references": [