diff --git a/advisories/github-reviewed/2024/05/GHSA-3965-hpx2-q597/GHSA-3965-hpx2-q597.json b/advisories/github-reviewed/2024/05/GHSA-3965-hpx2-q597/GHSA-3965-hpx2-q597.json index 4cde6aec3c0..38ecbebf579 100644 --- a/advisories/github-reviewed/2024/05/GHSA-3965-hpx2-q597/GHSA-3965-hpx2-q597.json +++ b/advisories/github-reviewed/2024/05/GHSA-3965-hpx2-q597/GHSA-3965-hpx2-q597.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3965-hpx2-q597", - "modified": "2024-05-24T14:45:02Z", + "modified": "2024-05-28T15:45:43Z", "published": "2024-05-24T14:45:02Z", "aliases": [ "CVE-2024-36361" @@ -28,11 +28,14 @@ "introduced": "0" }, { - "last_affected": "2.0.3" + "fixed": "3.0.3" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.0.3" + } }, { "package": { @@ -47,11 +50,14 @@ "introduced": "0" }, { - "last_affected": "3.0.2" + "fixed": "3.0.3" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 3.0.2" + } } ], "references": [ @@ -63,6 +69,14 @@ "type": "WEB", "url": "https://github.com/pugjs/pug/pull/3428" }, + { + "type": "WEB", + "url": "https://github.com/pugjs/pug/pull/3438" + }, + { + "type": "WEB", + "url": "https://github.com/pugjs/pug/commit/32acfe8f197dc44c54e8af32c7d7b19aa9d350fb" + }, { "type": "WEB", "url": "https://github.com/Coding-Competition-Team/hackac-2024/tree/main/web/pug" @@ -75,6 +89,10 @@ "type": "WEB", "url": "https://github.com/pugjs/pug/blob/4767cafea0af3d3f935553df0f9a8a6e76d470c2/packages/pug/lib/index.js#L328" }, + { + "type": "WEB", + "url": "https://github.com/pugjs/pug/releases/tag/pug%403.0.3" + }, { "type": "WEB", "url": "https://pugjs.org/api/reference.html"