From 883d52a464b08157ae040a4494ead8a49501166d Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 27 Jun 2023 19:53:25 +0000 Subject: [PATCH] Publish Advisories GHSA-4p4p-www8-8fv9 GHSA-7ghq-fvr3-pj2x GHSA-j9h8-phrw-h4fh GHSA-qfpc-5pjr-mh26 GHSA-7rjr-3q55-vv33 GHSA-vcgf-vmpc-ph79 GHSA-w3v3-cxq5-9vr4 --- .../05/GHSA-4p4p-www8-8fv9/GHSA-4p4p-www8-8fv9.json | 1 + .../08/GHSA-7ghq-fvr3-pj2x/GHSA-7ghq-fvr3-pj2x.json | 1 + .../08/GHSA-j9h8-phrw-h4fh/GHSA-j9h8-phrw-h4fh.json | 1 + .../08/GHSA-qfpc-5pjr-mh26/GHSA-qfpc-5pjr-mh26.json | 1 + .../12/GHSA-7rjr-3q55-vv33/GHSA-7rjr-3q55-vv33.json | 11 ++++++++++- .../01/GHSA-vcgf-vmpc-ph79/GHSA-vcgf-vmpc-ph79.json | 3 ++- .../01/GHSA-w3v3-cxq5-9vr4/GHSA-w3v3-cxq5-9vr4.json | 3 ++- 7 files changed, 18 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2021/05/GHSA-4p4p-www8-8fv9/GHSA-4p4p-www8-8fv9.json b/advisories/github-reviewed/2021/05/GHSA-4p4p-www8-8fv9/GHSA-4p4p-www8-8fv9.json index eca11669aee..e34042aafe6 100644 --- a/advisories/github-reviewed/2021/05/GHSA-4p4p-www8-8fv9/GHSA-4p4p-www8-8fv9.json +++ b/advisories/github-reviewed/2021/05/GHSA-4p4p-www8-8fv9/GHSA-4p4p-www8-8fv9.json @@ -260,6 +260,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-476", "CWE-824" ], "severity": "LOW", diff --git a/advisories/github-reviewed/2021/08/GHSA-7ghq-fvr3-pj2x/GHSA-7ghq-fvr3-pj2x.json b/advisories/github-reviewed/2021/08/GHSA-7ghq-fvr3-pj2x/GHSA-7ghq-fvr3-pj2x.json index 21951d642d6..b38a8acdf08 100644 --- a/advisories/github-reviewed/2021/08/GHSA-7ghq-fvr3-pj2x/GHSA-7ghq-fvr3-pj2x.json +++ b/advisories/github-reviewed/2021/08/GHSA-7ghq-fvr3-pj2x/GHSA-7ghq-fvr3-pj2x.json @@ -220,6 +220,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1284", "CWE-20" ], "severity": "MODERATE", diff --git a/advisories/github-reviewed/2021/08/GHSA-j9h8-phrw-h4fh/GHSA-j9h8-phrw-h4fh.json b/advisories/github-reviewed/2021/08/GHSA-j9h8-phrw-h4fh/GHSA-j9h8-phrw-h4fh.json index 69334c646df..ed7858b9349 100644 --- a/advisories/github-reviewed/2021/08/GHSA-j9h8-phrw-h4fh/GHSA-j9h8-phrw-h4fh.json +++ b/advisories/github-reviewed/2021/08/GHSA-j9h8-phrw-h4fh/GHSA-j9h8-phrw-h4fh.json @@ -95,6 +95,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-306", "CWE-502", "CWE-94" ], diff --git a/advisories/github-reviewed/2021/08/GHSA-qfpc-5pjr-mh26/GHSA-qfpc-5pjr-mh26.json b/advisories/github-reviewed/2021/08/GHSA-qfpc-5pjr-mh26/GHSA-qfpc-5pjr-mh26.json index 2b1933e0f28..716525d4c03 100644 --- a/advisories/github-reviewed/2021/08/GHSA-qfpc-5pjr-mh26/GHSA-qfpc-5pjr-mh26.json +++ b/advisories/github-reviewed/2021/08/GHSA-qfpc-5pjr-mh26/GHSA-qfpc-5pjr-mh26.json @@ -216,6 +216,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1284", "CWE-20" ], "severity": "MODERATE", diff --git a/advisories/github-reviewed/2021/12/GHSA-7rjr-3q55-vv33/GHSA-7rjr-3q55-vv33.json b/advisories/github-reviewed/2021/12/GHSA-7rjr-3q55-vv33/GHSA-7rjr-3q55-vv33.json index c4e3b852602..dcf955d627f 100644 --- a/advisories/github-reviewed/2021/12/GHSA-7rjr-3q55-vv33/GHSA-7rjr-3q55-vv33.json +++ b/advisories/github-reviewed/2021/12/GHSA-7rjr-3q55-vv33/GHSA-7rjr-3q55-vv33.json @@ -79,6 +79,14 @@ "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-jfh8-c2jp-5v3q" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/" @@ -150,7 +158,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-502" + "CWE-502", + "CWE-917" ], "severity": "CRITICAL", "github_reviewed": true, diff --git a/advisories/github-reviewed/2022/01/GHSA-vcgf-vmpc-ph79/GHSA-vcgf-vmpc-ph79.json b/advisories/github-reviewed/2022/01/GHSA-vcgf-vmpc-ph79/GHSA-vcgf-vmpc-ph79.json index 4952e7ebf29..85d5af26165 100644 --- a/advisories/github-reviewed/2022/01/GHSA-vcgf-vmpc-ph79/GHSA-vcgf-vmpc-ph79.json +++ b/advisories/github-reviewed/2022/01/GHSA-vcgf-vmpc-ph79/GHSA-vcgf-vmpc-ph79.json @@ -56,7 +56,8 @@ "database_specific": { "cwe_ids": [ "CWE-269", - "CWE-284" + "CWE-284", + "CWE-732" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2022/01/GHSA-w3v3-cxq5-9vr4/GHSA-w3v3-cxq5-9vr4.json b/advisories/github-reviewed/2022/01/GHSA-w3v3-cxq5-9vr4/GHSA-w3v3-cxq5-9vr4.json index 40623f6d215..d1638a2efbc 100644 --- a/advisories/github-reviewed/2022/01/GHSA-w3v3-cxq5-9vr4/GHSA-w3v3-cxq5-9vr4.json +++ b/advisories/github-reviewed/2022/01/GHSA-w3v3-cxq5-9vr4/GHSA-w3v3-cxq5-9vr4.json @@ -60,7 +60,8 @@ "database_specific": { "cwe_ids": [ "CWE-276", - "CWE-284" + "CWE-284", + "CWE-862" ], "severity": "MODERATE", "github_reviewed": true,