Advisory Database Sync

This commit is contained in:
advisory-database[bot]
2025-03-26 15:33:37 +00:00
parent ca8ce9280f
commit 9ea292ec71
151 changed files with 3376 additions and 145 deletions
@@ -1,14 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ph3v-2hq5-5qfq",
"modified": "2022-03-11T20:30:20Z",
"modified": "2025-03-26T15:32:24Z",
"published": "2022-03-07T00:00:41Z",
"aliases": [
"CVE-2021-46703"
],
"summary": "Code injection in RazorEngine",
"details": "In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
@@ -38,11 +43,17 @@
{
"type": "WEB",
"url": "https://github.com/Antaris/RazorEngine/issues/585"
},
{
"type": "PACKAGE",
"url": "https://github.com/Antaris/RazorEngine"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "MODERATE",
"cwe_ids": [
"CWE-1336"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2022-03-11T20:30:20Z",
"nvd_published_at": "2022-03-06T06:15:00Z"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2g67-jw5m-244m",
"modified": "2023-02-10T03:30:19Z",
"modified": "2025-03-26T15:32:08Z",
"published": "2023-02-03T06:30:23Z",
"aliases": [
"CVE-2023-25139"
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
"CWE-190",
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -25,7 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-20"
],
"severity": "MODERATE",
@@ -25,7 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122",
"CWE-787"
],
"severity": "MODERATE",
@@ -25,7 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-78w3-m2fr-9r73",
"modified": "2023-02-14T21:30:34Z",
"modified": "2025-03-26T15:32:17Z",
"published": "2023-02-06T21:30:29Z",
"aliases": [
"CVE-2022-44267"
@@ -27,6 +27,14 @@
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S"
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-789",
"CWE-89"
],
"severity": "CRITICAL",
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
"CWE-78",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -25,7 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g5qh-f5rv-grcp",
"modified": "2023-02-14T21:30:33Z",
"modified": "2025-03-26T15:32:17Z",
"published": "2023-02-06T21:30:29Z",
"aliases": [
"CVE-2022-44268"
@@ -27,6 +27,14 @@
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S"
@@ -49,7 +57,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-525"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jhxg-8fv9-xvgm",
"modified": "2023-02-15T15:30:41Z",
"modified": "2025-03-26T15:32:17Z",
"published": "2023-02-06T21:30:29Z",
"aliases": [
"CVE-2022-42951"
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-287"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121",
"CWE-787"
],
"severity": "MODERATE",

Some files were not shown because too many files have changed in this diff Show More