Publish Advisories

GHSA-fj7x-q9j7-g6q6
GHSA-vm8q-m57g-pff3

advisories/github-reviewed/2024/03/GHSA-fj7x-q9j7-g6q6/GHSA-fj7x-q9j7-g6q6.json

@@ -63,7 +63,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1333"
+      "CWE-1333",
+      "CWE-75"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,

advisories/github-reviewed/2024/03/GHSA-vm8q-m57g-pff3/GHSA-vm8q-m57g-pff3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vm8q-m57g-pff3",
-  "modified": "2024-05-03T10:29:22Z",
+  "modified": "2024-07-03T21:24:21Z",
   "published": "2024-03-15T21:30:43Z",
   "aliases": [
     "CVE-2024-27351"
@@ -9,7 +9,10 @@
   "summary": "Regular expression denial-of-service in Django",
   "details": "In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -143,7 +146,7 @@
     "cwe_ids": [
       "CWE-1333"
     ],
-    "severity": "LOW",
+    "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-03-18T20:36:41Z",
     "nvd_published_at": "2024-03-15T20:15:09Z"