Publish Advisories

GHSA-9cp3-fh5x-xfcj
GHSA-9c2p-jw8p-f84v

advisories/github-reviewed/2018/08/GHSA-9cp3-fh5x-xfcj/GHSA-9cp3-fh5x-xfcj.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9cp3-fh5x-xfcj",
-  "modified": "2020-08-31T18:26:23Z",
+  "modified": "2023-03-31T15:44:11Z",
   "published": "2018-08-09T20:55:46Z",
   "aliases": [
     "CVE-2017-16098"
@@ -9,7 +9,10 @@
   "summary": "Regular Expression Denial of Service in charset",
   "details": "Affected versions of `charset` are susceptible to a regular expression denial of service.\n\nThe amplification on this vulnerability is relatively low - it takes around 2 seconds for the engine to execute on a malicious input which is 50,000 characters in length.\n\n\nIf node was compiled using the `-DHTTP_MAX_HEADER_SIZE` however, the impact of the vulnerability can be significant, as the primary limitation for the vulnerability is the default max HTTP header length in node.\n\n\n## Recommendation\n\nUpdate to version 1.0.1 or later.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -42,19 +45,23 @@
       "url": "https://github.com/node-modules/charset/issues/10"
     },
     {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-9cp3-fh5x-xfcj"
+      "type": "WEB",
+      "url": "https://github.com/node-modules/charset/pull/11"
     },
     {
       "type": "WEB",
-      "url": "https://www.npmjs.com/advisories/524"
+      "url": "https://github.com/node-modules/charset/commit/effda0c48c51b47a47f4cad7db0c51ee7407cc1b"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/node-modules/charset"
     }
   ],
   "database_specific": {
     "cwe_ids": [
       "CWE-400"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2020-06-16T21:28:14Z",
     "nvd_published_at": null

advisories/github-reviewed/2019/02/GHSA-9c2p-jw8p-f84v/GHSA-9c2p-jw8p-f84v.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9c2p-jw8p-f84v",
-  "modified": "2020-08-31T18:10:56Z",
+  "modified": "2023-03-31T15:43:03Z",
   "published": "2019-02-18T23:54:24Z",
   "aliases": [
     "CVE-2016-10556"
@@ -9,7 +9,10 @@
   "summary": "SQL Injection in sequelize",
   "details": "Affected versions of `sequelize` cast arrays to strings and fail to properly escape the resulting SQL statement, resulting in a SQL injection vulnerability.\n\n\n## Proof of Concept\nIn Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as strings and improperly escaped.\n\nExample Query:\n```\ndatabase.query('SELECT * FROM TestTable WHERE Name IN (:names)', {\n  replacements: {\n    names: directCopyOfUserInput\n  }\n});\n```\n\nIf the user inputs the value of `:names` as:\n```\n[\"test\", \"'); DELETE TestTable WHERE Id = 1 --')\"]\n```\n\nThe resulting SQL statement will be:\n```\nSELECT Id FROM Table WHERE Name IN ('test', '\\'); DELETE TestTable WHERE Id = 1 --')\n```\nAs the backslash has no special meaning in PostgreSQL, MSSQL, or SQLite, the statement will delete the record in TestTable with an Id of 1.\n\n\n## Recommendation\n\nUpdate to version 3.20.0 or later.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -45,19 +48,19 @@
       "url": "https://github.com/sequelize/sequelize/issues/5671"
     },
     {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-9c2p-jw8p-f84v"
+      "type": "WEB",
+      "url": "https://github.com/sequelize/sequelize/commit/23952a2b020cc3571f090e67dae7feb084e1be71"
     },
     {
       "type": "WEB",
-      "url": "https://www.npmjs.com/advisories/102"
+      "url": "https://github.com/sequelize/sequelize/commits/v3.20.0?after=62e4dacb28a779a190a3e042b971dcd8c7926e49+34&branch=v3.20.0&qualified_name=refs%2Ftags%2Fv3.20.0"
     }
   ],
   "database_specific": {
     "cwe_ids": [
       "CWE-89"
     ],
-    "severity": "CRITICAL",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2020-06-16T21:28:12Z",
     "nvd_published_at": null