Publish Advisories

GHSA-vh7m-p724-62c2
GHSA-xwmv-cx7p-fqfc

advisories/github-reviewed/2020/07/GHSA-vh7m-p724-62c2/GHSA-vh7m-p724-62c2.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vh7m-p724-62c2",
-  "modified": "2021-09-23T17:39:58Z",
+  "modified": "2024-10-16T17:02:45Z",
   "published": "2020-07-29T20:40:35Z",
   "aliases": [
     "CVE-2020-13822"
@@ -57,6 +57,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/indutny/elliptic"
     },
+    {
+      "type": "WEB",
+      "url": "https://medium.com/%40herman_10687/malleability-attack-why-it-matters-7b5f59fb99a4"
+    },
     {
       "type": "WEB",
       "url": "https://medium.com/@herman_10687/malleability-attack-why-it-matters-7b5f59fb99a4"
@@ -77,6 +81,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2020-07-29T20:39:31Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2020-06-04T15:15:13Z"
   }
 }

advisories/github-reviewed/2024/02/GHSA-xwmv-cx7p-fqfc/GHSA-xwmv-cx7p-fqfc.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xwmv-cx7p-fqfc",
-  "modified": "2024-02-13T17:42:03Z",
+  "modified": "2024-10-16T17:03:49Z",
   "published": "2024-02-13T00:30:27Z",
   "aliases": [
     "CVE-2023-52430"
@@ -9,7 +9,10 @@
   "summary": "caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting",
   "details": "The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or /settings/mfa/delete/ substring.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
@@ -52,7 +55,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,