From 9c497db951bf472410ac4acf68cbd821ff6c68fa Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 24 Sep 2024 20:46:14 +0000
Subject: [PATCH] Publish Advisories

GHSA-9vjf-jjcq-3gh7
GHSA-p575-cf9h-wv42
GHSA-29gw-9793-fvw7
---
 .../GHSA-9vjf-jjcq-3gh7/GHSA-9vjf-jjcq-3gh7.json | 10 +++++++++-
 .../GHSA-p575-cf9h-wv42/GHSA-p575-cf9h-wv42.json | 12 ++++++++++--
 .../GHSA-29gw-9793-fvw7/GHSA-29gw-9793-fvw7.json | 16 ++++++++++++----
 3 files changed, 31 insertions(+), 7 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-9vjf-jjcq-3gh7/GHSA-9vjf-jjcq-3gh7.json b/advisories/github-reviewed/2022/05/GHSA-9vjf-jjcq-3gh7/GHSA-9vjf-jjcq-3gh7.json
index 23745e06ec1..313e03fa239 100644
--- a/advisories/github-reviewed/2022/05/GHSA-9vjf-jjcq-3gh7/GHSA-9vjf-jjcq-3gh7.json
+++ b/advisories/github-reviewed/2022/05/GHSA-9vjf-jjcq-3gh7/GHSA-9vjf-jjcq-3gh7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9vjf-jjcq-3gh7",
-  "modified": "2024-05-01T16:59:31Z",
+  "modified": "2024-09-24T20:44:59Z",
   "published": "2022-05-14T02:08:55Z",
   "aliases": [
     "CVE-2016-3630"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3630"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2016-29.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://security.gentoo.org/glsa/201612-19"
diff --git a/advisories/github-reviewed/2022/05/GHSA-p575-cf9h-wv42/GHSA-p575-cf9h-wv42.json b/advisories/github-reviewed/2022/05/GHSA-p575-cf9h-wv42/GHSA-p575-cf9h-wv42.json
index b6a9bc4e659..2e59e195726 100644
--- a/advisories/github-reviewed/2022/05/GHSA-p575-cf9h-wv42/GHSA-p575-cf9h-wv42.json
+++ b/advisories/github-reviewed/2022/05/GHSA-p575-cf9h-wv42/GHSA-p575-cf9h-wv42.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p575-cf9h-wv42",
-  "modified": "2024-05-01T16:55:10Z",
+  "modified": "2024-09-24T20:45:43Z",
   "published": "2022-05-14T01:49:39Z",
   "aliases": [
     "CVE-2018-17983"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17983"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2018-91.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://www.mercurial-scm.org/repo/hg/rev/5405cb1a7901"
@@ -53,7 +61,7 @@
     "cwe_ids": [
       "CWE-125"
     ],
-    "severity": "CRITICAL",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-05-01T16:55:10Z",
     "nvd_published_at": "2018-10-04T23:29:00Z"
diff --git a/advisories/github-reviewed/2023/02/GHSA-29gw-9793-fvw7/GHSA-29gw-9793-fvw7.json b/advisories/github-reviewed/2023/02/GHSA-29gw-9793-fvw7/GHSA-29gw-9793-fvw7.json
index 52cf1cd9c4f..9c3e3e279a3 100644
--- a/advisories/github-reviewed/2023/02/GHSA-29gw-9793-fvw7/GHSA-29gw-9793-fvw7.json
+++ b/advisories/github-reviewed/2023/02/GHSA-29gw-9793-fvw7/GHSA-29gw-9793-fvw7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-29gw-9793-fvw7",
-  "modified": "2023-02-10T22:08:04Z",
+  "modified": "2024-09-24T20:44:43Z",
   "published": "2023-02-10T19:55:53Z",
   "aliases": [
     "CVE-2023-24816"
@@ -12,13 +12,17 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "IPython"
+        "name": "ipython"
       },
       "ecosystem_specific": {
         "affected_functions": [
@@ -33,7 +37,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "8.10"
+              "fixed": "8.10.0"
             }
           ]
         }
@@ -72,6 +76,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/ipython/ipython/blob/56e6925dfa50e2c7f4a6471547b8176275db7c25/IPython/utils/_process_win32.py#L20"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2023-17.yaml"
     }
   ],
   "database_specific": {
@@ -79,7 +87,7 @@
       "CWE-20",
       "CWE-78"
     ],
-    "severity": "MODERATE",
+    "severity": "LOW",
     "github_reviewed": true,
     "github_reviewed_at": "2023-02-10T19:55:53Z",
     "nvd_published_at": "2023-02-10T20:15:00Z"