diff --git a/advisories/github-reviewed/2022/05/GHSA-4j3w-g62x-hrcp/GHSA-4j3w-g62x-hrcp.json b/advisories/github-reviewed/2022/05/GHSA-4j3w-g62x-hrcp/GHSA-4j3w-g62x-hrcp.json index dd6e5d2117d..9ccf48c9a0e 100644 --- a/advisories/github-reviewed/2022/05/GHSA-4j3w-g62x-hrcp/GHSA-4j3w-g62x-hrcp.json +++ b/advisories/github-reviewed/2022/05/GHSA-4j3w-g62x-hrcp/GHSA-4j3w-g62x-hrcp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4j3w-g62x-hrcp", - "modified": "2024-05-14T17:23:26Z", + "modified": "2024-11-22T20:13:55Z", "published": "2022-05-01T23:28:05Z", "aliases": [ "CVE-2008-0164" @@ -41,6 +41,14 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41263" }, + { + "type": "PACKAGE", + "url": "https://github.com/plone/Plone" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2008-14.yaml" + }, { "type": "WEB", "url": "http://plone.org/about/security/advisories/cve-2008-0164" @@ -49,10 +57,6 @@ "type": "WEB", "url": "http://plone.org/products/plone-hotfix/releases/CVE-2008-0164" }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/29361" - }, { "type": "WEB", "url": "http://securityreason.com/securityalert/3754" @@ -60,10 +64,6 @@ { "type": "WEB", "url": "http://www.procheckup.com/Hacking_Plone_CMS.pdf" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/archive/1/489544/100/0/threaded" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/05/GHSA-hf26-vvmx-x8c8/GHSA-hf26-vvmx-x8c8.json b/advisories/github-reviewed/2022/05/GHSA-hf26-vvmx-x8c8/GHSA-hf26-vvmx-x8c8.json index 19ac0e19cc1..8a8a11a928d 100644 --- a/advisories/github-reviewed/2022/05/GHSA-hf26-vvmx-x8c8/GHSA-hf26-vvmx-x8c8.json +++ b/advisories/github-reviewed/2022/05/GHSA-hf26-vvmx-x8c8/GHSA-hf26-vvmx-x8c8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hf26-vvmx-x8c8", - "modified": "2023-09-22T21:57:47Z", + "modified": "2024-11-22T20:13:16Z", "published": "2022-05-01T18:36:14Z", "aliases": [ "CVE-2007-5741" @@ -66,6 +66,10 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38288" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml" + }, { "type": "WEB", "url": "https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741" @@ -78,6 +82,10 @@ "type": "WEB", "url": "https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded" }, + { + "type": "WEB", + "url": "http://plone.org/about/security/advisories/cve-2007-5741" + }, { "type": "WEB", "url": "http://www.debian.org/security/2007/dsa-1405" diff --git a/advisories/unreviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json b/advisories/github-reviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json similarity index 60% rename from advisories/unreviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json rename to advisories/github-reviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json index a38e61db0ea..665c41cf3e3 100644 --- a/advisories/unreviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json +++ b/advisories/github-reviewed/2023/04/GHSA-v5hv-4pw3-q6h9/GHSA-v5hv-4pw3-q6h9.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-v5hv-4pw3-q6h9", - "modified": "2023-04-09T03:30:18Z", + "modified": "2024-11-22T20:14:38Z", "published": "2023-04-03T18:32:07Z", "aliases": [ "CVE-2022-38072" ], + "summary": "ADMesh improper array index validation", "details": "An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "admesh" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.98.5" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +44,14 @@ "type": "WEB", "url": "https://github.com/admesh/admesh/commit/5fab257268a0ee6f832c18d72af89810a29fbd5f" }, + { + "type": "PACKAGE", + "url": "https://github.com/admesh/python-admesh" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/admesh/PYSEC-2023-263.yaml" + }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2022-1594" @@ -36,8 +63,8 @@ "CWE-129" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-11-22T20:14:37Z", "nvd_published_at": "2023-04-03T16:15:00Z" } } \ No newline at end of file