From 99fa29e4a320353f0393ddaecfcfad0064d34ca7 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 9 May 2025 15:54:55 +0000 Subject: [PATCH] Publish Advisories GHSA-2w4w-4385-vh4h GHSA-6x45-r4pr-5362 GHSA-8m95-fffc-h4c5 --- .../GHSA-2w4w-4385-vh4h.json | 33 +++++++++++++++---- .../GHSA-6x45-r4pr-5362.json | 33 ++++++++++++++++--- .../GHSA-8m95-fffc-h4c5.json | 29 +++++++++++++--- 3 files changed, 81 insertions(+), 14 deletions(-) rename advisories/{unreviewed => github-reviewed}/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json (55%) rename advisories/{unreviewed => github-reviewed}/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json (56%) rename advisories/{unreviewed => github-reviewed}/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json (65%) diff --git a/advisories/unreviewed/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json b/advisories/github-reviewed/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json similarity index 55% rename from advisories/unreviewed/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json rename to advisories/github-reviewed/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json index 82fce347008..8dc0dfe0553 100644 --- a/advisories/unreviewed/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json +++ b/advisories/github-reviewed/2025/05/GHSA-2w4w-4385-vh4h/GHSA-2w4w-4385-vh4h.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-2w4w-4385-vh4h", - "modified": "2025-05-09T06:32:36Z", + "modified": "2025-05-09T15:53:26Z", "published": "2025-05-09T06:32:36Z", "aliases": [ "CVE-2025-47735" ], + "summary": "wgp race condition in inner::drop", "details": "inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.", "severity": [ { @@ -13,7 +14,27 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "crates.io", + "name": "wgp" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.2.0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -24,8 +45,8 @@ "url": "https://github.com/Nugine/wgp/issues/1" }, { - "type": "WEB", - "url": "https://crates.io/crates/wgp" + "type": "PACKAGE", + "url": "https://github.com/Nugine/wgp" } ], "database_specific": { @@ -33,8 +54,8 @@ "CWE-362" ], "severity": "LOW", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-05-09T15:53:26Z", "nvd_published_at": "2025-05-09T05:15:51Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json b/advisories/github-reviewed/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json similarity index 56% rename from advisories/unreviewed/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json rename to advisories/github-reviewed/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json index fd4e8a0ea5d..876c079ece3 100644 --- a/advisories/unreviewed/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json +++ b/advisories/github-reviewed/2025/05/GHSA-6x45-r4pr-5362/GHSA-6x45-r4pr-5362.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6x45-r4pr-5362", - "modified": "2025-05-09T06:32:36Z", + "modified": "2025-05-09T15:54:03Z", "published": "2025-05-09T06:32:36Z", "aliases": [ "CVE-2025-47737" ], + "summary": "trailer mishandles allocating with a size of zero", "details": "lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.", "severity": [ { @@ -13,7 +14,27 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "crates.io", + "name": "trailer" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.1.2" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -26,6 +47,10 @@ { "type": "WEB", "url": "https://crates.io/crates/trailer" + }, + { + "type": "PACKAGE", + "url": "https://github.com/Geal/trailer" } ], "database_specific": { @@ -33,8 +58,8 @@ "CWE-762" ], "severity": "LOW", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-05-09T15:54:02Z", "nvd_published_at": "2025-05-09T05:15:51Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json b/advisories/github-reviewed/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json similarity index 65% rename from advisories/unreviewed/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json rename to advisories/github-reviewed/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json index e841f6eb07b..5f77ccbe5ff 100644 --- a/advisories/unreviewed/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json +++ b/advisories/github-reviewed/2025/05/GHSA-8m95-fffc-h4c5/GHSA-8m95-fffc-h4c5.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-8m95-fffc-h4c5", - "modified": "2025-05-09T06:32:36Z", + "modified": "2025-05-09T15:53:43Z", "published": "2025-05-09T06:32:36Z", "aliases": [ "CVE-2025-47736" ], + "summary": "libsql-sqlite3-parser crash due to invalid UTF-8 input", "details": "dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.", "severity": [ { @@ -13,7 +14,27 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "crates.io", + "name": "libsql-sqlite3-parser" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.13.0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -41,8 +62,8 @@ "CWE-228" ], "severity": "LOW", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-05-09T15:53:43Z", "nvd_published_at": "2025-05-09T05:15:51Z" } } \ No newline at end of file