From 7981a4019b8eb8bae803bd5c0e7817d11226d8c7 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 14 Feb 2025 05:08:35 +0000 Subject: [PATCH] Publish Advisories GHSA-xphf-cx8h-7q9g GHSA-59v3-898r-qwhj GHSA-hvc6-42vf-jhf8 GHSA-qg8p-32gr-gh6x GHSA-hxf3-vgpm-fv9p --- .../2023/11/GHSA-xphf-cx8h-7q9g/GHSA-xphf-cx8h-7q9g.json | 5 ----- .../2023/12/GHSA-59v3-898r-qwhj/GHSA-59v3-898r-qwhj.json | 5 ----- .../2023/12/GHSA-hvc6-42vf-jhf8/GHSA-hvc6-42vf-jhf8.json | 5 ----- .../2023/12/GHSA-qg8p-32gr-gh6x/GHSA-qg8p-32gr-gh6x.json | 5 ----- .../2024/10/GHSA-hxf3-vgpm-fv9p/GHSA-hxf3-vgpm-fv9p.json | 6 +++--- 5 files changed, 3 insertions(+), 23 deletions(-) diff --git a/advisories/github-reviewed/2023/11/GHSA-xphf-cx8h-7q9g/GHSA-xphf-cx8h-7q9g.json b/advisories/github-reviewed/2023/11/GHSA-xphf-cx8h-7q9g/GHSA-xphf-cx8h-7q9g.json index 01fc248a943..e57be6a5192 100644 --- a/advisories/github-reviewed/2023/11/GHSA-xphf-cx8h-7q9g/GHSA-xphf-cx8h-7q9g.json +++ b/advisories/github-reviewed/2023/11/GHSA-xphf-cx8h-7q9g/GHSA-xphf-cx8h-7q9g.json @@ -13,11 +13,6 @@ "ecosystem": "crates.io", "name": "openssl" }, - "ecosystem_specific": { - "affected_functions": [ - "openssl::x509::store::X509StoreRef::objects" - ] - }, "ranges": [ { "type": "ECOSYSTEM", diff --git a/advisories/github-reviewed/2023/12/GHSA-59v3-898r-qwhj/GHSA-59v3-898r-qwhj.json b/advisories/github-reviewed/2023/12/GHSA-59v3-898r-qwhj/GHSA-59v3-898r-qwhj.json index 52c0e74d643..5750000d1d0 100644 --- a/advisories/github-reviewed/2023/12/GHSA-59v3-898r-qwhj/GHSA-59v3-898r-qwhj.json +++ b/advisories/github-reviewed/2023/12/GHSA-59v3-898r-qwhj/GHSA-59v3-898r-qwhj.json @@ -20,11 +20,6 @@ "ecosystem": "PyPI", "name": "mlflow" }, - "ecosystem_specific": { - "affected_functions": [ - "mlflow.utils.request_utils._get_http_response_with_retries" - ] - }, "ranges": [ { "type": "ECOSYSTEM", diff --git a/advisories/github-reviewed/2023/12/GHSA-hvc6-42vf-jhf8/GHSA-hvc6-42vf-jhf8.json b/advisories/github-reviewed/2023/12/GHSA-hvc6-42vf-jhf8/GHSA-hvc6-42vf-jhf8.json index 6a5c0034443..d0df0a484e7 100644 --- a/advisories/github-reviewed/2023/12/GHSA-hvc6-42vf-jhf8/GHSA-hvc6-42vf-jhf8.json +++ b/advisories/github-reviewed/2023/12/GHSA-hvc6-42vf-jhf8/GHSA-hvc6-42vf-jhf8.json @@ -20,11 +20,6 @@ "ecosystem": "PyPI", "name": "mlflow" }, - "ecosystem_specific": { - "affected_functions": [ - "mlflow.utils.file_utils.render_and_merge_yaml" - ] - }, "ranges": [ { "type": "ECOSYSTEM", diff --git a/advisories/github-reviewed/2023/12/GHSA-qg8p-32gr-gh6x/GHSA-qg8p-32gr-gh6x.json b/advisories/github-reviewed/2023/12/GHSA-qg8p-32gr-gh6x/GHSA-qg8p-32gr-gh6x.json index d314a4ea28f..a56164461b8 100644 --- a/advisories/github-reviewed/2023/12/GHSA-qg8p-32gr-gh6x/GHSA-qg8p-32gr-gh6x.json +++ b/advisories/github-reviewed/2023/12/GHSA-qg8p-32gr-gh6x/GHSA-qg8p-32gr-gh6x.json @@ -20,11 +20,6 @@ "ecosystem": "PyPI", "name": "mlflow" }, - "ecosystem_specific": { - "affected_functions": [ - "mlflow.utils.uri.is_local_uri" - ] - }, "ranges": [ { "type": "ECOSYSTEM", diff --git a/advisories/github-reviewed/2024/10/GHSA-hxf3-vgpm-fv9p/GHSA-hxf3-vgpm-fv9p.json b/advisories/github-reviewed/2024/10/GHSA-hxf3-vgpm-fv9p/GHSA-hxf3-vgpm-fv9p.json index dd607686dd1..272286a2a36 100644 --- a/advisories/github-reviewed/2024/10/GHSA-hxf3-vgpm-fv9p/GHSA-hxf3-vgpm-fv9p.json +++ b/advisories/github-reviewed/2024/10/GHSA-hxf3-vgpm-fv9p/GHSA-hxf3-vgpm-fv9p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hxf3-vgpm-fv9p", - "modified": "2025-02-03T13:26:39Z", + "modified": "2025-02-03T13:28:09Z", "published": "2024-10-28T00:30:48Z", "aliases": [ "CVE-2024-50611" @@ -11,11 +11,11 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" } ], "affected": [