diff --git a/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json b/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json index 08277c493c1..7ae091beb11 100644 --- a/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json +++ b/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rmpj-7c96-mrg8", - "modified": "2022-07-19T19:43:35Z", + "modified": "2023-06-27T20:51:43Z", "published": "2022-06-14T00:00:37Z", "aliases": [ "CVE-2021-37404" @@ -78,6 +78,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37404" }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/hadoop" + }, { "type": "WEB", "url": "https://lists.apache.org/thread/2h56ztcj3ojc66qzf1nno88vjw9vd4wo" diff --git a/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json b/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json index ffb0a3406bb..0f44cacad85 100644 --- a/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json +++ b/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json @@ -55,6 +55,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-862", "CWE-863" ], "severity": "MODERATE", diff --git a/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json b/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json index 5121d0314b3..5448c2e2a1a 100644 --- a/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json +++ b/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-fmq9-r4p2-8272", - "modified": "2022-12-06T00:39:13Z", + "modified": "2023-06-27T20:52:17Z", "published": "2022-09-22T00:00:26Z", "aliases": [ "CVE-2022-41255" ], "summary": "API token stored in plain text by Jenkins CONS3RT Plugin", - "details": "CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThis API token can be viewed by users with access to the Jenkins controller file system.", + "details": "Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThis API token can be viewed by users with access to the Jenkins controller file system.", "severity": [ { "type": "CVSS_V3", @@ -55,7 +55,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-256" + "CWE-256", + "CWE-522" ], "severity": "LOW", "github_reviewed": true,