diff --git a/advisories/github-reviewed/2022/05/GHSA-hhx9-4vw2-x54r/GHSA-hhx9-4vw2-x54r.json b/advisories/github-reviewed/2022/05/GHSA-hhx9-4vw2-x54r/GHSA-hhx9-4vw2-x54r.json index 2a896ded8e4..17f271d7330 100644 --- a/advisories/github-reviewed/2022/05/GHSA-hhx9-4vw2-x54r/GHSA-hhx9-4vw2-x54r.json +++ b/advisories/github-reviewed/2022/05/GHSA-hhx9-4vw2-x54r/GHSA-hhx9-4vw2-x54r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hhx9-4vw2-x54r", - "modified": "2024-04-29T16:06:47Z", + "modified": "2024-09-24T20:47:20Z", "published": "2022-05-13T01:26:14Z", "aliases": [ "CVE-2015-0260" @@ -9,7 +9,14 @@ "summary": "RhodeCode and Kallithea are vulnerable to sensitive information disclosure", "details": "RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -44,7 +51,7 @@ "introduced": "0" }, { - "fixed": "0.1" + "fixed": "0.2" } ] } @@ -60,6 +67,18 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100888" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/kallithea/PYSEC-2015-29.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rhodecode/PYSEC-2015-32.yaml" + }, + { + "type": "WEB", + "url": "https://kallithea-scm.org/repos/kallithea/changeset/5923d74742879b812965568475e21c3496d722a9" + }, { "type": "WEB", "url": "https://kallithea-scm.org/security/cve-2015-0260.html" @@ -81,7 +100,7 @@ "cwe_ids": [ "CWE-200" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-04-29T16:06:47Z", "nvd_published_at": "2015-02-16T15:59:00Z" diff --git a/advisories/github-reviewed/2022/05/GHSA-hvr9-wr9p-grgr/GHSA-hvr9-wr9p-grgr.json b/advisories/github-reviewed/2022/05/GHSA-hvr9-wr9p-grgr/GHSA-hvr9-wr9p-grgr.json index 04ffcdb1cde..21126fdeec6 100644 --- a/advisories/github-reviewed/2022/05/GHSA-hvr9-wr9p-grgr/GHSA-hvr9-wr9p-grgr.json +++ b/advisories/github-reviewed/2022/05/GHSA-hvr9-wr9p-grgr/GHSA-hvr9-wr9p-grgr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hvr9-wr9p-grgr", - "modified": "2024-05-01T17:00:31Z", + "modified": "2024-09-24T20:47:20Z", "published": "2022-05-14T01:04:30Z", "aliases": [ "CVE-2017-1000115" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -44,6 +48,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:2489" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2017-88.yaml" + }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201709-18" diff --git a/advisories/github-reviewed/2023/01/GHSA-jm3m-wr3p-hjrq/GHSA-jm3m-wr3p-hjrq.json b/advisories/github-reviewed/2023/01/GHSA-jm3m-wr3p-hjrq/GHSA-jm3m-wr3p-hjrq.json index 045a986f9ba..63c6fc60d7f 100644 --- a/advisories/github-reviewed/2023/01/GHSA-jm3m-wr3p-hjrq/GHSA-jm3m-wr3p-hjrq.json +++ b/advisories/github-reviewed/2023/01/GHSA-jm3m-wr3p-hjrq/GHSA-jm3m-wr3p-hjrq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jm3m-wr3p-hjrq", - "modified": "2023-02-02T17:16:19Z", + "modified": "2024-09-24T20:46:31Z", "published": "2023-01-27T00:30:18Z", "aliases": [ "CVE-2023-0519" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" } ], "affected": [ @@ -48,6 +52,10 @@ "type": "PACKAGE", "url": "https://github.com/modoboa/modoboa" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-31.yaml" + }, { "type": "WEB", "url": "https://huntr.dev/bounties/891ad0cb-d12f-4c5e-aac8-d7326caf2129" @@ -57,7 +65,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-01-27T01:05:12Z", "nvd_published_at": "2023-01-26T23:15:00Z"