Publish Advisories

GHSA-4j3w-g62x-hrcp
GHSA-hf26-vvmx-x8c8
GHSA-v5hv-4pw3-q6h9

advisories/github-reviewed/2022/05/GHSA-4j3w-g62x-hrcp/GHSA-4j3w-g62x-hrcp.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4j3w-g62x-hrcp",
-  "modified": "2024-05-14T17:23:26Z",
+  "modified": "2024-11-22T20:13:55Z",
   "published": "2022-05-01T23:28:05Z",
   "aliases": [
     "CVE-2008-0164"
@@ -41,6 +41,14 @@
       "type": "WEB",
       "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41263"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/plone/Plone"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2008-14.yaml"
+    },
     {
       "type": "WEB",
       "url": "http://plone.org/about/security/advisories/cve-2008-0164"
@@ -49,10 +57,6 @@
       "type": "WEB",
       "url": "http://plone.org/products/plone-hotfix/releases/CVE-2008-0164"
     },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/29361"
-    },
     {
       "type": "WEB",
       "url": "http://securityreason.com/securityalert/3754"
@@ -60,10 +64,6 @@
     {
       "type": "WEB",
       "url": "http://www.procheckup.com/Hacking_Plone_CMS.pdf"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/archive/1/489544/100/0/threaded"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2022/05/GHSA-hf26-vvmx-x8c8/GHSA-hf26-vvmx-x8c8.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hf26-vvmx-x8c8",
-  "modified": "2023-09-22T21:57:47Z",
+  "modified": "2024-11-22T20:13:16Z",
   "published": "2022-05-01T18:36:14Z",
   "aliases": [
     "CVE-2007-5741"
@@ -66,6 +66,10 @@
       "type": "WEB",
       "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38288"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741"
@@ -78,6 +82,10 @@
       "type": "WEB",
       "url": "https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded"
     },
+    {
+      "type": "WEB",
+      "url": "http://plone.org/about/security/advisories/cve-2007-5741"
+    },
     {
       "type": "WEB",
       "url": "http://www.debian.org/security/2007/dsa-1405"

advisories/github-reviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v5hv-4pw3-q6h9",
-  "modified": "2023-04-09T03:30:18Z",
+  "modified": "2024-11-22T20:14:38Z",
   "published": "2023-04-03T18:32:07Z",
   "aliases": [
     "CVE-2022-38072"
   ],
+  "summary": "ADMesh improper array index validation",
   "details": "An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "admesh"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.98.5"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -25,6 +44,14 @@
       "type": "WEB",
       "url": "https://github.com/admesh/admesh/commit/5fab257268a0ee6f832c18d72af89810a29fbd5f"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/admesh/python-admesh"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/admesh/PYSEC-2023-263.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2022-1594"
@@ -36,8 +63,8 @@
       "CWE-129"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-22T20:14:37Z",
     "nvd_published_at": "2023-04-03T16:15:00Z"
   }
 }