diff --git a/advisories/github-reviewed/2020/02/GHSA-w2fr-65vp-mxw3/GHSA-w2fr-65vp-mxw3.json b/advisories/github-reviewed/2020/02/GHSA-w2fr-65vp-mxw3/GHSA-w2fr-65vp-mxw3.json index 57920bfab48..a50e50e211e 100644 --- a/advisories/github-reviewed/2020/02/GHSA-w2fr-65vp-mxw3/GHSA-w2fr-65vp-mxw3.json +++ b/advisories/github-reviewed/2020/02/GHSA-w2fr-65vp-mxw3/GHSA-w2fr-65vp-mxw3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w2fr-65vp-mxw3", - "modified": "2021-08-19T17:12:23Z", + "modified": "2024-02-05T11:09:27Z", "published": "2020-02-12T18:44:50Z", "aliases": [ "CVE-2019-10912" @@ -223,6 +223,44 @@ ] } ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "typo3/cms-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0" + }, + { + "fixed": "9.5.8" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "typo3/cms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0" + }, + { + "fixed": "9.5.8" + } + ] + } + ] } ], "references": [ @@ -246,6 +284,46 @@ "type": "WEB", "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10912.yaml" }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-10912.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-10912.yaml" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42UEKSLKJB72P24JBWVN6AADHLMYSUQD/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QEAOZXVNDA63537A2OIH4QE77EKZR5O/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAC2TQVEEH5FDJSSWPM2BCRIPTCOEMMO/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHHIG4GMSGEIDT3RITSW7GJ5NT6IBHXU/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFARAUAWZE4UDSKVDWRD35D75HI5UGSD/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDSM576XIOVXVCMHNJHLBBZBTOD62LDA/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTJGZJLPG5FHKFH7KNAKNTWOGBB6LXAL/" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLOZX5BZMQKWG7PJRQL6MB5CAMKBQAWD/" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42UEKSLKJB72P24JBWVN6AADHLMYSUQD/" @@ -290,6 +368,10 @@ "type": "WEB", "url": "https://symfony.com/cve-2019-10912" }, + { + "type": "WEB", + "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-016" + }, { "type": "WEB", "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-016/" @@ -306,6 +388,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-02-11T20:17:25Z", - "nvd_published_at": null + "nvd_published_at": "2019-05-16T22:29:00Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2020/03/GHSA-mcx4-f5f5-4859/GHSA-mcx4-f5f5-4859.json b/advisories/github-reviewed/2020/03/GHSA-mcx4-f5f5-4859/GHSA-mcx4-f5f5-4859.json index 65a960aef24..d8cc69c7886 100644 --- a/advisories/github-reviewed/2020/03/GHSA-mcx4-f5f5-4859/GHSA-mcx4-f5f5-4859.json +++ b/advisories/github-reviewed/2020/03/GHSA-mcx4-f5f5-4859/GHSA-mcx4-f5f5-4859.json @@ -52,6 +52,44 @@ ] } ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.4.0" + }, + { + "fixed": "4.4.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "symfony/symfony" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "5.0.0" + }, + { + "fixed": "5.0.7" + } + ] + } + ] } ], "references": [ @@ -67,6 +105,14 @@ "type": "WEB", "url": "https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6" }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2020-5255.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2020-5255.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/" @@ -74,6 +120,10 @@ { "type": "WEB", "url": "https://symfony.com/blog/cve-2020-5255-prevent-cache-poisoning-via-a-response-content-type-header" + }, + { + "type": "WEB", + "url": "https://symfony.com/cve-2020-5255" } ], "database_specific": { diff --git a/advisories/github-reviewed/2020/09/GHSA-754h-5r27-7x3r/GHSA-754h-5r27-7x3r.json b/advisories/github-reviewed/2020/09/GHSA-754h-5r27-7x3r/GHSA-754h-5r27-7x3r.json index 2c6bbe6fa9a..e9288bcc937 100644 --- a/advisories/github-reviewed/2020/09/GHSA-754h-5r27-7x3r/GHSA-754h-5r27-7x3r.json +++ b/advisories/github-reviewed/2020/09/GHSA-754h-5r27-7x3r/GHSA-754h-5r27-7x3r.json @@ -105,6 +105,14 @@ "type": "WEB", "url": "https://github.com/symfony/symfony/commit/d9910e0b33a2e0f993abff41c6fbc86951b66d78" }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2020-15094.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2020-15094.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/symfony/symfony" @@ -124,6 +132,10 @@ { "type": "WEB", "url": "https://packagist.org/packages/symfony/symfony" + }, + { + "type": "WEB", + "url": "https://symfony.com/cve-2020-15094" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/02/GHSA-5mv2-rx3q-4w2v/GHSA-5mv2-rx3q-4w2v.json b/advisories/github-reviewed/2022/02/GHSA-5mv2-rx3q-4w2v/GHSA-5mv2-rx3q-4w2v.json index bccd5a0af26..2f079a1dbdd 100644 --- a/advisories/github-reviewed/2022/02/GHSA-5mv2-rx3q-4w2v/GHSA-5mv2-rx3q-4w2v.json +++ b/advisories/github-reviewed/2022/02/GHSA-5mv2-rx3q-4w2v/GHSA-5mv2-rx3q-4w2v.json @@ -71,6 +71,10 @@ "type": "WEB", "url": "https://github.com/twigphp/Twig/commit/2eb33080558611201b55079d07ac88f207b466d5" }, + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/twig/twig/CVE-2022-23614.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/twigphp/Twig/" @@ -91,6 +95,10 @@ "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIGZCFSYLPP7UVJ4E4NLHSOQSKYNXSAD/" }, + { + "type": "WEB", + "url": "https://symfony.com/blog/twig-security-release-disallow-non-closures-in-the-sort-filter" + }, { "type": "WEB", "url": "https://www.debian.org/security/2022/dsa-5107"