Publish Advisories

GHSA-fmj9-77q8-g6c4
GHSA-jw9c-mfg7-9rx2

advisories/github-reviewed/2024/08/GHSA-fmj9-77q8-g6c4/GHSA-fmj9-77q8-g6c4.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fmj9-77q8-g6c4",
-  "modified": "2024-08-27T18:14:12Z",
+  "modified": "2024-09-13T13:35:59Z",
   "published": "2024-08-27T18:14:12Z",
   "aliases": [
     "CVE-2024-43414"
@@ -82,6 +82,10 @@
       "type": "WEB",
       "url": "https://github.com/apollographql/federation/security/advisories/GHSA-fmj9-77q8-g6c4"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43414"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/apollographql/router/commit/e309c9bb5a48c1304ff69c88b7eabdd08c26bf45"
@@ -101,11 +105,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-673"
+      "CWE-673",
+      "CWE-674"
     ],
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-08-27T18:14:12Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-08-27T18:15:15Z"
   }
 }

advisories/github-reviewed/2024/09/GHSA-jw9c-mfg7-9rx2/GHSA-jw9c-mfg7-9rx2.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jw9c-mfg7-9rx2",
-  "modified": "2024-09-11T21:03:15Z",
+  "modified": "2024-09-13T13:36:37Z",
   "published": "2024-09-10T19:42:03Z",
   "aliases": [
     "CVE-2024-45409"
@@ -79,9 +79,21 @@
       "type": "WEB",
       "url": "https://github.com/SAML-Toolkits/ruby-saml/commit/4865d030cae9705ee5cdb12415c654c634093ae7"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/omniauth/omniauth-saml/commit/4274e9d57e65f2dcaae4aa3b2accf831494f2ddd"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/SAML-Toolkits/ruby-saml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth-saml/CVE-2024-45409.yml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2024-45409.yml"
     }
   ],
   "database_specific": {