From 882c2a1e0f4f55e7c25eb59a9f1e8d04c5fb5fe3 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 15 Dec 2023 17:35:26 +0000 Subject: [PATCH] Publish GHSA-6q78-6xvr-26fg --- .../GHSA-6q78-6xvr-26fg.json | 56 +++++++++++++++++++ 1 file changed, 56 insertions(+) diff --git a/advisories/github-reviewed/2022/05/GHSA-6q78-6xvr-26fg/GHSA-6q78-6xvr-26fg.json b/advisories/github-reviewed/2022/05/GHSA-6q78-6xvr-26fg/GHSA-6q78-6xvr-26fg.json index 00fa60c0b3a..61f3a592ec2 100644 --- a/advisories/github-reviewed/2022/05/GHSA-6q78-6xvr-26fg/GHSA-6q78-6xvr-26fg.json +++ b/advisories/github-reviewed/2022/05/GHSA-6q78-6xvr-26fg/GHSA-6q78-6xvr-26fg.json @@ -36,6 +36,50 @@ "database_specific": { "last_known_affected_version_range": "<= 2.61" } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:pipeline-model-definition" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.3.4.1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.3.4" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:script-security" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.50" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.49" + } } ], "references": [ @@ -43,6 +87,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1003001" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/pipeline-model-definition-plugin/commit/6d7884dec610bf34503d24d494d994e9fc607642" + }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/script-security-plugin/commit/2c5122e50742dd16492f9424992deb21cc07837c" + }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/workflow-cps-plugin/commit/66c3e7aafe7888d4e1fe9995a688bb3fb742d742" + }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHBA-2019:0326"