From 8a31d25b6c2d336a6a6ca17abc186596e7bc98f8 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 19 Nov 2024 16:32:45 +0000 Subject: [PATCH] Publish Advisories GHSA-w9g2-3w7p-72g9 GHSA-3p37-3636-q8wv GHSA-mgv8-gggw-mrg6 --- .../GHSA-w9g2-3w7p-72g9/GHSA-w9g2-3w7p-72g9.json | 15 +++++++++------ .../GHSA-3p37-3636-q8wv/GHSA-3p37-3636-q8wv.json | 6 +++++- .../GHSA-mgv8-gggw-mrg6/GHSA-mgv8-gggw-mrg6.json | 6 +++++- 3 files changed, 19 insertions(+), 8 deletions(-) diff --git a/advisories/github-reviewed/2023/04/GHSA-w9g2-3w7p-72g9/GHSA-w9g2-3w7p-72g9.json b/advisories/github-reviewed/2023/04/GHSA-w9g2-3w7p-72g9/GHSA-w9g2-3w7p-72g9.json index dc31726bc06..7a54daa4f00 100644 --- a/advisories/github-reviewed/2023/04/GHSA-w9g2-3w7p-72g9/GHSA-w9g2-3w7p-72g9.json +++ b/advisories/github-reviewed/2023/04/GHSA-w9g2-3w7p-72g9/GHSA-w9g2-3w7p-72g9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w9g2-3w7p-72g9", - "modified": "2023-04-25T16:34:41Z", + "modified": "2024-11-19T16:31:34Z", "published": "2023-04-24T22:33:52Z", "aliases": [ "CVE-2023-30629" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,11 +24,6 @@ "ecosystem": "PyPI", "name": "vyper" }, - "ecosystem_specific": { - "affected_functions": [ - "vyper.builtins.functions.RawCall.build_IR" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -65,6 +64,10 @@ "type": "WEB", "url": "https://github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vy#L164" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-131.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/vyperlang/vyper" diff --git a/advisories/github-reviewed/2023/05/GHSA-3p37-3636-q8wv/GHSA-3p37-3636-q8wv.json b/advisories/github-reviewed/2023/05/GHSA-3p37-3636-q8wv/GHSA-3p37-3636-q8wv.json index 3390cfb3b0b..494f0b092ef 100644 --- a/advisories/github-reviewed/2023/05/GHSA-3p37-3636-q8wv/GHSA-3p37-3636-q8wv.json +++ b/advisories/github-reviewed/2023/05/GHSA-3p37-3636-q8wv/GHSA-3p37-3636-q8wv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3p37-3636-q8wv", - "modified": "2023-06-06T17:05:03Z", + "modified": "2024-11-19T16:32:12Z", "published": "2023-05-12T20:21:54Z", "aliases": [ "CVE-2023-31146" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ diff --git a/advisories/github-reviewed/2023/05/GHSA-mgv8-gggw-mrg6/GHSA-mgv8-gggw-mrg6.json b/advisories/github-reviewed/2023/05/GHSA-mgv8-gggw-mrg6/GHSA-mgv8-gggw-mrg6.json index 66b24f5253a..d593a960ca8 100644 --- a/advisories/github-reviewed/2023/05/GHSA-mgv8-gggw-mrg6/GHSA-mgv8-gggw-mrg6.json +++ b/advisories/github-reviewed/2023/05/GHSA-mgv8-gggw-mrg6/GHSA-mgv8-gggw-mrg6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mgv8-gggw-mrg6", - "modified": "2023-06-06T17:00:54Z", + "modified": "2024-11-19T16:31:53Z", "published": "2023-05-05T22:22:23Z", "aliases": [ "CVE-2023-30837" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [