From 9a059060bcc37f29cb57fe51ff23133b61be6e50 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 21:44:38 +0000
Subject: [PATCH] Publish Advisories

GHSA-7w53-hfpw-rg3g
GHSA-prc3-7f44-w48j
GHSA-xh5x-j8jf-pcpx
---
 .../GHSA-7w53-hfpw-rg3g.json                  |  10 +-
 .../GHSA-prc3-7f44-w48j.json                  | 232 ++++++++++++++++--
 .../GHSA-xh5x-j8jf-pcpx.json                  | 187 ++++++++++++--
 3 files changed, 372 insertions(+), 57 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-7w53-hfpw-rg3g/GHSA-7w53-hfpw-rg3g.json b/advisories/github-reviewed/2022/05/GHSA-7w53-hfpw-rg3g/GHSA-7w53-hfpw-rg3g.json
index 89b24e97044..e932e985fd3 100644
--- a/advisories/github-reviewed/2022/05/GHSA-7w53-hfpw-rg3g/GHSA-7w53-hfpw-rg3g.json
+++ b/advisories/github-reviewed/2022/05/GHSA-7w53-hfpw-rg3g/GHSA-7w53-hfpw-rg3g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7w53-hfpw-rg3g",
-  "modified": "2023-08-28T23:40:22Z",
+  "modified": "2025-04-14T21:43:11Z",
   "published": "2022-05-17T01:36:49Z",
   "aliases": [
     "CVE-2013-1397"
@@ -154,17 +154,9 @@
       "type": "WEB",
       "url": "https://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released"
     },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/51980"
-    },
     {
       "type": "WEB",
       "url": "http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/57574"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2022/05/GHSA-prc3-7f44-w48j/GHSA-prc3-7f44-w48j.json b/advisories/github-reviewed/2022/05/GHSA-prc3-7f44-w48j/GHSA-prc3-7f44-w48j.json
index 1ada2b7583d..fca1c56aabd 100644
--- a/advisories/github-reviewed/2022/05/GHSA-prc3-7f44-w48j/GHSA-prc3-7f44-w48j.json
+++ b/advisories/github-reviewed/2022/05/GHSA-prc3-7f44-w48j/GHSA-prc3-7f44-w48j.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-prc3-7f44-w48j",
-  "modified": "2024-02-22T16:55:24Z",
+  "modified": "2025-04-14T21:41:44Z",
   "published": "2022-05-14T01:10:18Z",
   "aliases": [
     "CVE-2014-0119"
@@ -66,6 +66,120 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-catalina"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "6.0.40"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-catalina"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.0.0"
+            },
+            {
+              "fixed": "7.0.54"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-catalina"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0"
+            },
+            {
+              "fixed": "8.0.6"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-jasper"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "6.0.40"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-jasper"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.0.0"
+            },
+            {
+              "fixed": "7.0.54"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-jasper"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0"
+            },
+            {
+              "fixed": "8.0.6"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [
@@ -111,31 +225,7 @@
     },
     {
       "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/ce70ee6b8fe437a498a375215011056702b0c481"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/ad3b34a290a0255d2a4c356a3611ab41ed9d04f5"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/934f884f330dad192d2c5dc950e28f4cd281461b"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/769477b9bc8442db3f571385fa0c3e206242cbf1"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/6246d8307fb5f2b4ff0b0f4d6d1b0250dff01a81"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/5aae1323c31d643afa9f2db80713b8e97b5123af"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/5517c5517e8a7ddb994504f0c5c05001a376b10c"
+      "url": "https://github.com/apache/tomcat/commit/080878ea519d8c74c53721a9ebf7be6fcf6f1f2f"
     },
     {
       "type": "WEB",
@@ -143,7 +233,31 @@
     },
     {
       "type": "WEB",
-      "url": "https://github.com/apache/tomcat/commit/080878ea519d8c74c53721a9ebf7be6fcf6f1f2f"
+      "url": "https://github.com/apache/tomcat/commit/5517c5517e8a7ddb994504f0c5c05001a376b10c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/5aae1323c31d643afa9f2db80713b8e97b5123af"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/6246d8307fb5f2b4ff0b0f4d6d1b0250dff01a81"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/769477b9bc8442db3f571385fa0c3e206242cbf1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/934f884f330dad192d2c5dc950e28f4cd281461b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/ad3b34a290a0255d2a4c356a3611ab41ed9d04f5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/ce70ee6b8fe437a498a375215011056702b0c481"
     },
     {
       "type": "PACKAGE",
@@ -153,30 +267,58 @@
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
+    },
     {
       "type": "WEB",
       "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013"
@@ -213,6 +355,18 @@
       "type": "WEB",
       "url": "http://seclists.org/fulldisclosure/2014/May/141"
     },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59732"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59873"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/60729"
+    },
     {
       "type": "WEB",
       "url": "http://svn.apache.org/viewvc?view=revision&revision=1588193"
@@ -297,6 +451,18 @@
       "type": "WEB",
       "url": "http://www.debian.org/security/2016/dsa-3552"
     },
+    {
+      "type": "WEB",
+      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:052"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:053"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:084"
+    },
     {
       "type": "WEB",
       "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
@@ -309,6 +475,18 @@
       "type": "WEB",
       "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html"
     },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/bid/67669"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securitytracker.com/id/1030298"
+    },
     {
       "type": "WEB",
       "url": "http://www.ubuntu.com/usn/USN-2654-1"
diff --git a/advisories/github-reviewed/2022/05/GHSA-xh5x-j8jf-pcpx/GHSA-xh5x-j8jf-pcpx.json b/advisories/github-reviewed/2022/05/GHSA-xh5x-j8jf-pcpx/GHSA-xh5x-j8jf-pcpx.json
index 080156a2855..bedee141c40 100644
--- a/advisories/github-reviewed/2022/05/GHSA-xh5x-j8jf-pcpx/GHSA-xh5x-j8jf-pcpx.json
+++ b/advisories/github-reviewed/2022/05/GHSA-xh5x-j8jf-pcpx/GHSA-xh5x-j8jf-pcpx.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xh5x-j8jf-pcpx",
-  "modified": "2024-02-22T16:44:48Z",
+  "modified": "2025-04-14T21:42:27Z",
   "published": "2022-05-14T01:10:18Z",
   "aliases": [
     "CVE-2014-0099"
@@ -66,6 +66,63 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-util"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "6.0.40"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-util"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.0.0"
+            },
+            {
+              "fixed": "7.0.54"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-util"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0"
+            },
+            {
+              "fixed": "8.0.6"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [
@@ -86,28 +143,12 @@
       "url": "https://github.com/apache/tomcat80/commit/990de53ab923c126f7402090a4ca53df4bb80cbd"
     },
     {
-      "type": "PACKAGE",
-      "url": "https://github.com/apache/tomcat"
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
     },
     {
       "type": "WEB",
-      "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
+      "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
     },
     {
       "type": "WEB",
@@ -115,7 +156,47 @@
     },
     {
       "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
+      "url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
+    },
+    {
+      "type": "WEB",
+      "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/tomcat"
     },
     {
       "type": "WEB",
@@ -165,6 +246,38 @@
       "type": "WEB",
       "url": "http://seclists.org/fulldisclosure/2014/May/140"
     },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59121"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59678"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59732"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59835"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59849"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/59873"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/60729"
+    },
+    {
+      "type": "WEB",
+      "url": "http://secunia.com/advisories/60793"
+    },
     {
       "type": "WEB",
       "url": "http://svn.apache.org/viewvc?view=revision&revision=1578812"
@@ -209,6 +322,18 @@
       "type": "WEB",
       "url": "http://www.debian.org/security/2016/dsa-3530"
     },
+    {
+      "type": "WEB",
+      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:052"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:053"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:084"
+    },
     {
       "type": "WEB",
       "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
@@ -217,6 +342,26 @@
       "type": "WEB",
       "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"
     },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/archive/1/532218/100/0/threaded"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/archive/1/532221/100/0/threaded"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/bid/67668"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securitytracker.com/id/1030302"
+    },
     {
       "type": "WEB",
       "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"