Publish Advisories

GHSA-2xpj-f5g2-8p7m
GHSA-39vm-p9mr-4r27

advisories/github-reviewed/2021/04/GHSA-2xpj-f5g2-8p7m/GHSA-2xpj-f5g2-8p7m.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2xpj-f5g2-8p7m",
-  "modified": "2023-08-30T21:16:22Z",
+  "modified": "2024-09-12T21:06:18Z",
   "published": "2021-04-20T16:30:51Z",
   "aliases": [
     "CVE-2020-17446"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -44,10 +48,22 @@
       "type": "WEB",
       "url": "https://github.com/MagicStack/asyncpg/commit/69bcdf5bf7696b98ee708be5408fd7d854e910d0"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/MagicStack/asyncpg"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/MagicStack/asyncpg/releases/tag/v0.21.0"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-2xpj-f5g2-8p7m"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/asyncpg/PYSEC-2020-24.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00002.html"

advisories/github-reviewed/2022/05/GHSA-39vm-p9mr-4r27/GHSA-39vm-p9mr-4r27.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-39vm-p9mr-4r27",
-  "modified": "2024-05-01T10:58:46Z",
+  "modified": "2024-09-12T21:05:41Z",
   "published": "2022-05-17T05:22:19Z",
   "aliases": [
     "CVE-2012-3458"
@@ -9,7 +9,14 @@
   "summary": "Beaker Sensitive Information Disclosure vulnerability",
   "details": "Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -49,6 +56,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/bbangert/beaker"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/beaker/PYSEC-2012-1.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://web.archive.org/web/20140724164516/http://secunia.com/advisories/50226"
@@ -68,7 +79,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-326"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,