Publish Advisories

GHSA-65h2-wf7m-q2v8
GHSA-5chr-wjw5-3gq4
GHSA-5pr3-m5hm-9956

advisories/github-reviewed/2023/09/GHSA-65h2-wf7m-q2v8/GHSA-65h2-wf7m-q2v8.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-65h2-wf7m-q2v8",
-  "modified": "2023-10-27T15:30:17Z",
+  "modified": "2023-10-27T21:03:21Z",
   "published": "2023-09-27T15:30:35Z",
   "aliases": [
     "CVE-2023-3223"
@@ -87,18 +87,14 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/undertow-io/undertow"
-    },
-    {
-      "type": "WEB",
-      "url": "https://security.netapp.com/advisory/ntap-20231027-0004/"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-400"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
+    "github_reviewed": true,
     "github_reviewed_at": "2023-09-27T20:16:42Z",
     "nvd_published_at": null
   }

advisories/github-reviewed/2023/10/GHSA-5chr-wjw5-3gq4/GHSA-5chr-wjw5-3gq4.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5chr-wjw5-3gq4",
-  "modified": "2023-10-25T18:32:19Z",
+  "modified": "2023-10-27T21:03:51Z",
   "published": "2023-10-10T21:27:53Z",
   "aliases": [
     "CVE-2023-45129"
   ],
   "summary": "matrix-synapse vulnerable to denial of service due to malicious server ACL events",
-  "details": "### Impact\nA malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service.\n\nHomeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected.\n\n### Patches\nServer administrators are advised to upgrade to Synapse 1.94.0 or later.\n\n### Workarounds\nRooms with malicious server ACL events can be [purged and blocked](https://matrix-org.github.io/synapse/latest/admin_api/rooms.html#version-2-new-version) using the admin API.\n\n### References\n\nhttps://github.com/matrix-org/synapse/pull/16360\n",
+  "details": "### Impact\nA malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service.\n\nHomeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected.\n\n### Patches\nServer administrators are advised to upgrade to Synapse 1.94.0 or later.\n\n### Workarounds\nRooms with malicious server ACL events can be [purged and blocked](https://matrix-org.github.io/synapse/latest/admin_api/rooms.html#version-2-new-version) using the admin API.\n",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -78,7 +78,7 @@
       "CWE-770"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
+    "github_reviewed": true,
     "github_reviewed_at": "2023-10-10T21:27:53Z",
     "nvd_published_at": null
   }

advisories/github-reviewed/2023/10/GHSA-5pr3-m5hm-9956/GHSA-5pr3-m5hm-9956.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5pr3-m5hm-9956",
-  "modified": "2023-10-25T18:32:23Z",
+  "modified": "2023-10-27T21:04:48Z",
   "published": "2023-10-24T19:21:02Z",
   "aliases": [
     "CVE-2023-43795"
@@ -63,6 +63,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43795"
     },
+    {
+      "type": "WEB",
+      "url": "https://docs.geoserver.org/latest/en/user/security/urlchecks.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.geoserver.org/stable/en/user/services/wps/security.html#complex-inputs"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/geoserver/geoserver"
@@ -73,7 +81,7 @@
       "CWE-918"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
+    "github_reviewed": true,
     "github_reviewed_at": "2023-10-24T19:21:02Z",
     "nvd_published_at": null
   }