From a0114b071f74b8d6f67607afd203d19acad6aa9e Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 22:47:01 +0000 Subject: [PATCH] Publish Advisories GHSA-c7pr-343r-5c46 GHSA-wjw6-2cqr-j4qr GHSA-xv8x-pr4h-73jv GHSA-27mf-ghqm-j3j8 GHSA-7cc9-j4mv-vcjp --- .../GHSA-c7pr-343r-5c46/GHSA-c7pr-343r-5c46.json | 10 +++++++++- .../GHSA-wjw6-2cqr-j4qr/GHSA-wjw6-2cqr-j4qr.json | 14 +++++++++++--- .../GHSA-xv8x-pr4h-73jv/GHSA-xv8x-pr4h-73jv.json | 10 +++++++++- .../GHSA-27mf-ghqm-j3j8/GHSA-27mf-ghqm-j3j8.json | 8 ++++++-- .../GHSA-7cc9-j4mv-vcjp/GHSA-7cc9-j4mv-vcjp.json | 12 ++++++++++-- 5 files changed, 45 insertions(+), 9 deletions(-) diff --git a/advisories/github-reviewed/2021/10/GHSA-c7pr-343r-5c46/GHSA-c7pr-343r-5c46.json b/advisories/github-reviewed/2021/10/GHSA-c7pr-343r-5c46/GHSA-c7pr-343r-5c46.json index c379de50938..5f543127aa7 100644 --- a/advisories/github-reviewed/2021/10/GHSA-c7pr-343r-5c46/GHSA-c7pr-343r-5c46.json +++ b/advisories/github-reviewed/2021/10/GHSA-c7pr-343r-5c46/GHSA-c7pr-343r-5c46.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c7pr-343r-5c46", - "modified": "2021-10-06T13:26:05Z", + "modified": "2024-11-18T22:44:51Z", "published": "2021-10-06T17:48:46Z", "aliases": [ "CVE-2021-41122" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -48,6 +52,10 @@ "type": "WEB", "url": "https://github.com/vyperlang/vyper/pull/2447" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2021-366.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/vyperlang/vyper" diff --git a/advisories/github-reviewed/2021/10/GHSA-wjw6-2cqr-j4qr/GHSA-wjw6-2cqr-j4qr.json b/advisories/github-reviewed/2021/10/GHSA-wjw6-2cqr-j4qr/GHSA-wjw6-2cqr-j4qr.json index c79900b2612..b4cdb9127fa 100644 --- a/advisories/github-reviewed/2021/10/GHSA-wjw6-2cqr-j4qr/GHSA-wjw6-2cqr-j4qr.json +++ b/advisories/github-reviewed/2021/10/GHSA-wjw6-2cqr-j4qr/GHSA-wjw6-2cqr-j4qr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wjw6-2cqr-j4qr", - "modified": "2021-10-19T18:03:49Z", + "modified": "2024-11-18T22:45:45Z", "published": "2021-10-19T20:14:36Z", "aliases": [ "CVE-2021-41131" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N" } ], "affected": [ @@ -28,7 +32,7 @@ "introduced": "0" }, { - "fixed": "0.19" + "fixed": "0.19.0" } ] } @@ -52,6 +56,10 @@ "type": "WEB", "url": "https://github.com/theupdateframework/python-tuf/commit/4ad7ae48fda594b640139c3b7eae21ed5155a102" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2021-376.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/theupdateframework/python-tuf" @@ -61,7 +69,7 @@ "cwe_ids": [ "CWE-22" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-10-19T16:09:34Z", "nvd_published_at": "2021-10-19T18:15:00Z" diff --git a/advisories/github-reviewed/2021/10/GHSA-xv8x-pr4h-73jv/GHSA-xv8x-pr4h-73jv.json b/advisories/github-reviewed/2021/10/GHSA-xv8x-pr4h-73jv/GHSA-xv8x-pr4h-73jv.json index 503a1b49fb8..d02fcb7003f 100644 --- a/advisories/github-reviewed/2021/10/GHSA-xv8x-pr4h-73jv/GHSA-xv8x-pr4h-73jv.json +++ b/advisories/github-reviewed/2021/10/GHSA-xv8x-pr4h-73jv/GHSA-xv8x-pr4h-73jv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xv8x-pr4h-73jv", - "modified": "2021-10-18T16:33:54Z", + "modified": "2024-11-18T22:44:23Z", "published": "2021-10-12T15:59:29Z", "aliases": [ "CVE-2021-41121" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -48,6 +52,10 @@ "type": "WEB", "url": "https://github.com/vyperlang/vyper/pull/2447" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2021-365.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/vyperlang/vyper" diff --git a/advisories/github-reviewed/2024/11/GHSA-27mf-ghqm-j3j8/GHSA-27mf-ghqm-j3j8.json b/advisories/github-reviewed/2024/11/GHSA-27mf-ghqm-j3j8/GHSA-27mf-ghqm-j3j8.json index 07a0ab2d4f4..007b4639fa8 100644 --- a/advisories/github-reviewed/2024/11/GHSA-27mf-ghqm-j3j8/GHSA-27mf-ghqm-j3j8.json +++ b/advisories/github-reviewed/2024/11/GHSA-27mf-ghqm-j3j8/GHSA-27mf-ghqm-j3j8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-27mf-ghqm-j3j8", - "modified": "2024-11-18T21:02:17Z", + "modified": "2024-11-18T22:45:48Z", "published": "2024-11-18T21:02:17Z", "aliases": [ "CVE-2024-52303" @@ -40,6 +40,10 @@ "type": "WEB", "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-27mf-ghqm-j3j8" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52303" + }, { "type": "WEB", "url": "https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936" @@ -56,6 +60,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-11-18T21:02:17Z", - "nvd_published_at": null + "nvd_published_at": "2024-11-18T20:15:06Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/11/GHSA-7cc9-j4mv-vcjp/GHSA-7cc9-j4mv-vcjp.json b/advisories/github-reviewed/2024/11/GHSA-7cc9-j4mv-vcjp/GHSA-7cc9-j4mv-vcjp.json index 782b2541ea5..371d13ff65d 100644 --- a/advisories/github-reviewed/2024/11/GHSA-7cc9-j4mv-vcjp/GHSA-7cc9-j4mv-vcjp.json +++ b/advisories/github-reviewed/2024/11/GHSA-7cc9-j4mv-vcjp/GHSA-7cc9-j4mv-vcjp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7cc9-j4mv-vcjp", - "modified": "2024-11-18T20:01:46Z", + "modified": "2024-11-18T22:45:37Z", "published": "2024-11-18T20:01:46Z", "aliases": [ "CVE-2024-48917" @@ -97,10 +97,18 @@ "type": "WEB", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-7cc9-j4mv-vcjp" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48917" + }, { "type": "PACKAGE", "url": "https://github.com/PHPOffice/PhpSpreadsheet" }, + { + "type": "WEB", + "url": "https://github.com/PHPOffice/PhpSpreadsheet/blob/39fc51309181e82593b06e2fa8e45ef8333a0335/src/PhpSpreadsheet/Reader/Security/XmlScanner.php" + }, { "type": "WEB", "url": "https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing" @@ -113,6 +121,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-11-18T20:01:46Z", - "nvd_published_at": null + "nvd_published_at": "2024-11-18T20:15:05Z" } } \ No newline at end of file