diff --git a/advisories/github-reviewed/2024/03/GHSA-fj7x-q9j7-g6q6/GHSA-fj7x-q9j7-g6q6.json b/advisories/github-reviewed/2024/03/GHSA-fj7x-q9j7-g6q6/GHSA-fj7x-q9j7-g6q6.json index 11ef440a1ad..fb582dff265 100644 --- a/advisories/github-reviewed/2024/03/GHSA-fj7x-q9j7-g6q6/GHSA-fj7x-q9j7-g6q6.json +++ b/advisories/github-reviewed/2024/03/GHSA-fj7x-q9j7-g6q6/GHSA-fj7x-q9j7-g6q6.json @@ -63,7 +63,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-1333" + "CWE-1333", + "CWE-75" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/03/GHSA-vm8q-m57g-pff3/GHSA-vm8q-m57g-pff3.json b/advisories/github-reviewed/2024/03/GHSA-vm8q-m57g-pff3/GHSA-vm8q-m57g-pff3.json index dfe06f0847f..5914e33f709 100644 --- a/advisories/github-reviewed/2024/03/GHSA-vm8q-m57g-pff3/GHSA-vm8q-m57g-pff3.json +++ b/advisories/github-reviewed/2024/03/GHSA-vm8q-m57g-pff3/GHSA-vm8q-m57g-pff3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vm8q-m57g-pff3", - "modified": "2024-05-03T10:29:22Z", + "modified": "2024-07-03T21:24:21Z", "published": "2024-03-15T21:30:43Z", "aliases": [ "CVE-2024-27351" @@ -9,7 +9,10 @@ "summary": "Regular expression denial-of-service in Django", "details": "In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232 and CVE-2023-43665.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" + } ], "affected": [ { @@ -143,7 +146,7 @@ "cwe_ids": [ "CWE-1333" ], - "severity": "LOW", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-03-18T20:36:41Z", "nvd_published_at": "2024-03-15T20:15:09Z"