From ad44ffa9519702dd5b47c7039b608f949037fc9c Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 3 Oct 2024 21:27:16 +0000 Subject: [PATCH] Publish Advisories GHSA-f865-m6cq-j9vx GHSA-hvm4-mc7m-22w4 --- .../GHSA-f865-m6cq-j9vx.json | 62 +++++++++++-------- .../GHSA-hvm4-mc7m-22w4.json | 12 +++- 2 files changed, 45 insertions(+), 29 deletions(-) diff --git a/advisories/github-reviewed/2021/08/GHSA-f865-m6cq-j9vx/GHSA-f865-m6cq-j9vx.json b/advisories/github-reviewed/2021/08/GHSA-f865-m6cq-j9vx/GHSA-f865-m6cq-j9vx.json index f49abb18b47..f2dfb8aa944 100644 --- a/advisories/github-reviewed/2021/08/GHSA-f865-m6cq-j9vx/GHSA-f865-m6cq-j9vx.json +++ b/advisories/github-reviewed/2021/08/GHSA-f865-m6cq-j9vx/GHSA-f865-m6cq-j9vx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f865-m6cq-j9vx", - "modified": "2021-10-08T20:45:06Z", + "modified": "2024-10-03T21:26:29Z", "published": "2021-08-09T20:44:51Z", "aliases": [ "CVE-2021-29063" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -64,33 +68,9 @@ "type": "WEB", "url": "https://github.com/mpmath/mpmath/commit/c811b37c65a4372a7ce613111d2a508c204f9833" }, - { - "type": "PACKAGE", - "url": "https://github.com/fredrik-johansson/mpmath" - }, { "type": "WEB", - "url": "https://github.com/mpmath/mpmath/releases/tag/1.3.0" - }, - { - "type": "WEB", - "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mpmath/PYSEC-2021-427.yaml" - }, - { - "type": "WEB", - "url": "https://github.com/yetingli/PoCs/blob/main/CVE-2021-29063/Mpmath.md" - }, - { - "type": "WEB", - "url": "https://github.com/yetingli/SaveResults/blob/main/js/hosted-git-info.js" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3M5O55E7VUDMXCPQR6MQTOIFDKHP36AA" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUX3XWY2K3MSO7QXMZXQQYAURARSPC5" + "url": "https://www.npmjs.com/package/hosted-git-info" }, { "type": "WEB", @@ -98,7 +78,35 @@ }, { "type": "WEB", - "url": "https://www.npmjs.com/package/hosted-git-info" + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUX3XWY2K3MSO7QXMZXQQYAURARSPC5" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3M5O55E7VUDMXCPQR6MQTOIFDKHP36AA" + }, + { + "type": "WEB", + "url": "https://github.com/yetingli/SaveResults/blob/main/js/hosted-git-info.js" + }, + { + "type": "WEB", + "url": "https://github.com/yetingli/PoCs/blob/main/CVE-2021-29063/Mpmath.md" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mpmath/PYSEC-2021-427.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/mpmath/mpmath/releases/tag/1.3.0" + }, + { + "type": "PACKAGE", + "url": "https://github.com/fredrik-johansson/mpmath" + }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-f865-m6cq-j9vx" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/05/GHSA-hvm4-mc7m-22w4/GHSA-hvm4-mc7m-22w4.json b/advisories/github-reviewed/2022/05/GHSA-hvm4-mc7m-22w4/GHSA-hvm4-mc7m-22w4.json index 63b932674c9..de1a555a74e 100644 --- a/advisories/github-reviewed/2022/05/GHSA-hvm4-mc7m-22w4/GHSA-hvm4-mc7m-22w4.json +++ b/advisories/github-reviewed/2022/05/GHSA-hvm4-mc7m-22w4/GHSA-hvm4-mc7m-22w4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hvm4-mc7m-22w4", - "modified": "2024-02-23T21:31:08Z", + "modified": "2024-10-03T21:25:51Z", "published": "2022-05-24T19:11:58Z", "aliases": [ "CVE-2021-38598" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -80,6 +84,10 @@ "type": "PACKAGE", "url": "https://github.com/openstack/neutron" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-360.yaml" + }, { "type": "WEB", "url": "https://launchpad.net/bugs/1938670" @@ -93,7 +101,7 @@ "cwe_ids": [ "CWE-863" ], - "severity": "CRITICAL", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-02-23T21:31:08Z", "nvd_published_at": "2021-08-23T05:15:00Z"