From a3adf40b7ada0ca9d77415f2fd42e4fcf53af660 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 13 Nov 2024 22:41:56 +0000 Subject: [PATCH] Publish Advisories GHSA-4v5p-v5h9-6xjx GHSA-8rcj-c8pj-v3m3 GHSA-qx3f-p745-w4hr GHSA-wc4g-r73w-x8mm --- .../GHSA-4v5p-v5h9-6xjx/GHSA-4v5p-v5h9-6xjx.json | 16 ++++++++++++++-- .../GHSA-8rcj-c8pj-v3m3/GHSA-8rcj-c8pj-v3m3.json | 16 ++++++++++++++-- .../GHSA-qx3f-p745-w4hr/GHSA-qx3f-p745-w4hr.json | 14 +++++++++++++- .../GHSA-wc4g-r73w-x8mm/GHSA-wc4g-r73w-x8mm.json | 14 +++++++++++++- 4 files changed, 54 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2022/02/GHSA-4v5p-v5h9-6xjx/GHSA-4v5p-v5h9-6xjx.json b/advisories/github-reviewed/2022/02/GHSA-4v5p-v5h9-6xjx/GHSA-4v5p-v5h9-6xjx.json index e21aad4b58c..38c58eea292 100644 --- a/advisories/github-reviewed/2022/02/GHSA-4v5p-v5h9-6xjx/GHSA-4v5p-v5h9-6xjx.json +++ b/advisories/github-reviewed/2022/02/GHSA-4v5p-v5h9-6xjx/GHSA-4v5p-v5h9-6xjx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4v5p-v5h9-6xjx", - "modified": "2022-02-11T15:06:53Z", + "modified": "2024-11-13T22:40:58Z", "published": "2022-02-09T23:49:01Z", "aliases": [ "CVE-2022-23565" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/c2b31ff2d3151acb230edc3f5b1832d2c713a9e0" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-74.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-129.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" @@ -218,7 +230,7 @@ "cwe_ids": [ "CWE-617" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-03T20:24:46Z", "nvd_published_at": "2022-02-04T23:15:00Z" diff --git a/advisories/github-reviewed/2022/02/GHSA-8rcj-c8pj-v3m3/GHSA-8rcj-c8pj-v3m3.json b/advisories/github-reviewed/2022/02/GHSA-8rcj-c8pj-v3m3/GHSA-8rcj-c8pj-v3m3.json index b7f5da982e2..e04dc86c324 100644 --- a/advisories/github-reviewed/2022/02/GHSA-8rcj-c8pj-v3m3/GHSA-8rcj-c8pj-v3m3.json +++ b/advisories/github-reviewed/2022/02/GHSA-8rcj-c8pj-v3m3/GHSA-8rcj-c8pj-v3m3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8rcj-c8pj-v3m3", - "modified": "2022-02-11T15:07:06Z", + "modified": "2024-11-13T22:40:32Z", "published": "2022-02-09T23:55:28Z", "aliases": [ "CVE-2022-23564" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/14fea662350e7c26eb5fe1be2ac31704e5682ee6" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-73.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-128.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" @@ -218,7 +230,7 @@ "cwe_ids": [ "CWE-617" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-03T21:00:20Z", "nvd_published_at": "2022-02-04T23:15:00Z" diff --git a/advisories/github-reviewed/2022/02/GHSA-qx3f-p745-w4hr/GHSA-qx3f-p745-w4hr.json b/advisories/github-reviewed/2022/02/GHSA-qx3f-p745-w4hr/GHSA-qx3f-p745-w4hr.json index 33a991f03d2..c3e912a7b1b 100644 --- a/advisories/github-reviewed/2022/02/GHSA-qx3f-p745-w4hr/GHSA-qx3f-p745-w4hr.json +++ b/advisories/github-reviewed/2022/02/GHSA-qx3f-p745-w4hr/GHSA-qx3f-p745-w4hr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qx3f-p745-w4hr", - "modified": "2022-02-11T15:07:29Z", + "modified": "2024-11-13T22:38:50Z", "published": "2022-02-09T23:54:07Z", "aliases": [ "CVE-2022-23562" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -217,6 +221,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/f0147751fd5d2ff23251149ebad9af9f03010732" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-71.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-126.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" diff --git a/advisories/github-reviewed/2022/02/GHSA-wc4g-r73w-x8mm/GHSA-wc4g-r73w-x8mm.json b/advisories/github-reviewed/2022/02/GHSA-wc4g-r73w-x8mm/GHSA-wc4g-r73w-x8mm.json index 8a3062d16db..d4d286e2677 100644 --- a/advisories/github-reviewed/2022/02/GHSA-wc4g-r73w-x8mm/GHSA-wc4g-r73w-x8mm.json +++ b/advisories/github-reviewed/2022/02/GHSA-wc4g-r73w-x8mm/GHSA-wc4g-r73w-x8mm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wc4g-r73w-x8mm", - "modified": "2022-02-07T22:08:14Z", + "modified": "2024-11-13T22:39:27Z", "published": "2022-02-09T23:54:51Z", "aliases": [ "CVE-2022-23563" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -205,6 +209,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23563" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-72.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-127.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/tensorflow/tensorflow"