diff --git a/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json b/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json index 40e745be711..1c349936d02 100644 --- a/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json +++ b/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5jfw-gq64-q45f", - "modified": "2024-11-19T21:07:59Z", + "modified": "2024-11-20T16:44:28Z", "published": "2024-11-19T21:07:59Z", "aliases": [ "CVE-2024-52595" @@ -40,6 +40,10 @@ "type": "WEB", "url": "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-5jfw-gq64-q45f" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52595" + }, { "type": "WEB", "url": "https://github.com/fedora-python/lxml_html_clean/pull/19" @@ -62,6 +66,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-11-19T21:07:59Z", - "nvd_published_at": null + "nvd_published_at": "2024-11-19T22:15:21Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/11/GHSA-phm4-wf3h-pc3r/GHSA-phm4-wf3h-pc3r.json b/advisories/github-reviewed/2024/11/GHSA-phm4-wf3h-pc3r/GHSA-phm4-wf3h-pc3r.json index 28e8ac91b85..38d2305212d 100644 --- a/advisories/github-reviewed/2024/11/GHSA-phm4-wf3h-pc3r/GHSA-phm4-wf3h-pc3r.json +++ b/advisories/github-reviewed/2024/11/GHSA-phm4-wf3h-pc3r/GHSA-phm4-wf3h-pc3r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-phm4-wf3h-pc3r", - "modified": "2024-11-19T20:38:06Z", + "modified": "2024-11-20T16:44:12Z", "published": "2024-11-15T18:30:51Z", "aliases": [ "CVE-2024-44625" @@ -9,7 +9,10 @@ "summary": "Unpatched Remote Code Execution in Gogs", "details": "Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -45,6 +48,10 @@ "type": "PACKAGE", "url": "https://github.com/gogs/gogs" }, + { + "type": "WEB", + "url": "https://gogs.io" + }, { "type": "WEB", "url": "https://pkg.go.dev/vuln/GO-2024-3275"