diff --git a/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json b/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json index 17c533af8cf..caac96dc311 100644 --- a/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json +++ b/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-876p-c77m-x2hc", - "modified": "2024-07-01T22:34:03Z", + "modified": "2024-07-03T20:03:13Z", "published": "2024-07-01T15:32:17Z", "aliases": [ "CVE-2024-38996" @@ -9,7 +9,10 @@ "summary": "ag-grid-community were discovered to contain a prototype pollution via the _.mergeDeep function", "details": "ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -57,7 +60,7 @@ "cwe_ids": [ "CWE-1321" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-07-01T22:34:03Z", "nvd_published_at": "2024-07-01T13:15:05Z" diff --git a/advisories/github-reviewed/2024/07/GHSA-88vr-hjqx-57qh/GHSA-88vr-hjqx-57qh.json b/advisories/github-reviewed/2024/07/GHSA-88vr-hjqx-57qh/GHSA-88vr-hjqx-57qh.json index 76c8f3ce001..e4846fe0429 100644 --- a/advisories/github-reviewed/2024/07/GHSA-88vr-hjqx-57qh/GHSA-88vr-hjqx-57qh.json +++ b/advisories/github-reviewed/2024/07/GHSA-88vr-hjqx-57qh/GHSA-88vr-hjqx-57qh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-88vr-hjqx-57qh", - "modified": "2024-07-01T22:34:44Z", + "modified": "2024-07-03T20:04:00Z", "published": "2024-07-01T15:32:17Z", "aliases": [ "CVE-2024-38997" @@ -9,7 +9,10 @@ "summary": "adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults", "details": "adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } ], "affected": [ { @@ -38,7 +41,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-1321" ], "severity": "MODERATE", "github_reviewed": true,