From b4cb684cc02bea1acfbbca086e37c1e0e35d3f64 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 2 Dec 2024 05:09:06 +0000 Subject: [PATCH] Advisory Database Sync --- .../07/GHSA-7xcx-6wjh-7xp2/GHSA-7xcx-6wjh-7xp2.json | 8 ++------ .../07/GHSA-gm9x-q798-hmr4/GHSA-gm9x-q798-hmr4.json | 4 +--- .../07/GHSA-jmqm-f2gx-4fjv/GHSA-jmqm-f2gx-4fjv.json | 4 +--- .../07/GHSA-mm44-wc5p-wqhq/GHSA-mm44-wc5p-wqhq.json | 12 +++--------- .../07/GHSA-wvh7-5p38-2qfc/GHSA-wvh7-5p38-2qfc.json | 8 ++------ .../08/GHSA-3fw8-66wf-pr7m/GHSA-3fw8-66wf-pr7m.json | 4 +--- .../08/GHSA-5cp4-xmrw-59wf/GHSA-5cp4-xmrw-59wf.json | 4 +--- .../08/GHSA-6qqj-rx4w-r3cj/GHSA-6qqj-rx4w-r3cj.json | 4 +--- .../08/GHSA-9vxc-g2jx-qj3p/GHSA-9vxc-g2jx-qj3p.json | 4 +--- .../08/GHSA-g4xp-36c3-f7mr/GHSA-g4xp-36c3-f7mr.json | 4 +--- .../08/GHSA-j7wp-vjj6-cp5m/GHSA-j7wp-vjj6-cp5m.json | 8 ++------ .../08/GHSA-m273-wwfv-h6jp/GHSA-m273-wwfv-h6jp.json | 4 +--- .../08/GHSA-q6j3-c4wc-63vw/GHSA-q6j3-c4wc-63vw.json | 4 +--- .../08/GHSA-vjfr-p6hp-jqqw/GHSA-vjfr-p6hp-jqqw.json | 4 +--- .../08/GHSA-whrh-9j4q-g7ph/GHSA-whrh-9j4q-g7ph.json | 4 +--- .../08/GHSA-xw5p-hw6r-2j98/GHSA-xw5p-hw6r-2j98.json | 4 +--- .../09/GHSA-224h-p7p5-rh85/GHSA-224h-p7p5-rh85.json | 4 +--- .../09/GHSA-28xx-8j99-m32j/GHSA-28xx-8j99-m32j.json | 4 +--- .../09/GHSA-2q6w-rxf3-4wc9/GHSA-2q6w-rxf3-4wc9.json | 4 +--- .../09/GHSA-33gc-f8v9-v8hm/GHSA-33gc-f8v9-v8hm.json | 4 +--- .../09/GHSA-353r-3v84-9pjj/GHSA-353r-3v84-9pjj.json | 4 +--- .../09/GHSA-3cjv-4phw-gvvv/GHSA-3cjv-4phw-gvvv.json | 4 +--- .../09/GHSA-4ccc-jm2p-vg3p/GHSA-4ccc-jm2p-vg3p.json | 4 +--- .../09/GHSA-4p7j-5ppx-rfhm/GHSA-4p7j-5ppx-rfhm.json | 4 +--- .../09/GHSA-4v9q-hm2p-68c4/GHSA-4v9q-hm2p-68c4.json | 8 ++------ .../09/GHSA-53mj-mc38-q894/GHSA-53mj-mc38-q894.json | 12 +++--------- .../09/GHSA-5g4r-87v2-jqvx/GHSA-5g4r-87v2-jqvx.json | 4 +--- .../09/GHSA-5x7p-gm79-383m/GHSA-5x7p-gm79-383m.json | 4 +--- .../09/GHSA-77g4-36jp-5v3m/GHSA-77g4-36jp-5v3m.json | 4 +--- .../09/GHSA-7f59-x49p-v8mq/GHSA-7f59-x49p-v8mq.json | 4 +--- .../09/GHSA-7hvm-29rf-2gf2/GHSA-7hvm-29rf-2gf2.json | 4 +--- .../09/GHSA-7ww4-c3mj-93cf/GHSA-7ww4-c3mj-93cf.json | 4 +--- .../09/GHSA-7x92-2j68-h32c/GHSA-7x92-2j68-h32c.json | 8 ++------ .../09/GHSA-7xfq-xh6v-4mrm/GHSA-7xfq-xh6v-4mrm.json | 4 +--- .../09/GHSA-8c8c-4vfj-rrpc/GHSA-8c8c-4vfj-rrpc.json | 8 ++------ .../09/GHSA-8h8v-6qqm-fwpq/GHSA-8h8v-6qqm-fwpq.json | 8 ++------ .../09/GHSA-8qm2-24qc-c4qg/GHSA-8qm2-24qc-c4qg.json | 4 +--- .../09/GHSA-92px-q4w8-hrr5/GHSA-92px-q4w8-hrr5.json | 4 +--- .../09/GHSA-992f-wf4w-x36v/GHSA-992f-wf4w-x36v.json | 8 ++------ .../09/GHSA-9hc2-w9gg-q6jw/GHSA-9hc2-w9gg-q6jw.json | 4 +--- .../09/GHSA-9x64-5r7x-2q53/GHSA-9x64-5r7x-2q53.json | 4 +--- .../09/GHSA-c2v2-7rcg-2ch7/GHSA-c2v2-7rcg-2ch7.json | 4 +--- .../09/GHSA-c7pp-g2v2-2766/GHSA-c7pp-g2v2-2766.json | 4 +--- .../09/GHSA-c8h6-89q2-mgv8/GHSA-c8h6-89q2-mgv8.json | 4 +--- .../09/GHSA-cjj8-wfrx-jqcf/GHSA-cjj8-wfrx-jqcf.json | 4 +--- .../09/GHSA-fvq6-55gv-jx9f/GHSA-fvq6-55gv-jx9f.json | 4 +--- .../09/GHSA-g376-whg7-896m/GHSA-g376-whg7-896m.json | 8 ++------ .../09/GHSA-g3qw-9pgp-xpj4/GHSA-g3qw-9pgp-xpj4.json | 8 ++------ .../09/GHSA-gjcw-v447-2w7q/GHSA-gjcw-v447-2w7q.json | 4 +--- .../09/GHSA-gjhx-gxwx-jx9j/GHSA-gjhx-gxwx-jx9j.json | 4 +--- .../09/GHSA-h2jv-5v3f-7m7j/GHSA-h2jv-5v3f-7m7j.json | 4 +--- .../09/GHSA-h5vj-f7r9-w564/GHSA-h5vj-f7r9-w564.json | 4 +--- .../09/GHSA-hf5h-hh56-3vrg/GHSA-hf5h-hh56-3vrg.json | 4 +--- .../09/GHSA-hfc6-79wv-5hpw/GHSA-hfc6-79wv-5hpw.json | 4 +--- .../09/GHSA-hfq9-rfpv-j8r8/GHSA-hfq9-rfpv-j8r8.json | 4 +--- .../09/GHSA-hgr5-82rc-p936/GHSA-hgr5-82rc-p936.json | 8 ++------ .../09/GHSA-hpr5-wp7c-hh5q/GHSA-hpr5-wp7c-hh5q.json | 8 ++------ .../09/GHSA-j3g2-m5jj-6336/GHSA-j3g2-m5jj-6336.json | 4 +--- .../09/GHSA-j3qq-qvc8-c6g7/GHSA-j3qq-qvc8-c6g7.json | 4 +--- .../09/GHSA-m25q-fwg4-9v2p/GHSA-m25q-fwg4-9v2p.json | 4 +--- .../09/GHSA-m36m-x4c5-rjxj/GHSA-m36m-x4c5-rjxj.json | 12 +++--------- .../09/GHSA-m4vv-p6fq-jhqp/GHSA-m4vv-p6fq-jhqp.json | 8 ++------ .../09/GHSA-m5p4-7wf9-6w99/GHSA-m5p4-7wf9-6w99.json | 4 +--- .../09/GHSA-m7qm-r2r5-f77q/GHSA-m7qm-r2r5-f77q.json | 8 ++------ .../09/GHSA-m852-866j-69j8/GHSA-m852-866j-69j8.json | 4 +--- .../09/GHSA-mf7c-58q5-7v65/GHSA-mf7c-58q5-7v65.json | 4 +--- .../09/GHSA-mj87-8xf8-fp4w/GHSA-mj87-8xf8-fp4w.json | 4 +--- .../09/GHSA-mpjf-8cmf-p789/GHSA-mpjf-8cmf-p789.json | 8 ++------ .../09/GHSA-p239-93f7-h6xf/GHSA-p239-93f7-h6xf.json | 4 +--- .../09/GHSA-pjh3-jv7w-9jpr/GHSA-pjh3-jv7w-9jpr.json | 4 +--- .../09/GHSA-qmxf-fxq7-w59f/GHSA-qmxf-fxq7-w59f.json | 4 +--- .../09/GHSA-v2jq-9475-r5g8/GHSA-v2jq-9475-r5g8.json | 4 +--- .../09/GHSA-v3jv-wrf4-5845/GHSA-v3jv-wrf4-5845.json | 4 +--- .../09/GHSA-v5hp-35hw-cw5x/GHSA-v5hp-35hw-cw5x.json | 4 +--- .../09/GHSA-vp8g-53fw-r9f2/GHSA-vp8g-53fw-r9f2.json | 4 +--- .../09/GHSA-w8hg-mxvh-9h57/GHSA-w8hg-mxvh-9h57.json | 4 +--- .../09/GHSA-wm7q-rxch-43mx/GHSA-wm7q-rxch-43mx.json | 12 +++--------- .../09/GHSA-wmcq-3wfx-qjx5/GHSA-wmcq-3wfx-qjx5.json | 8 ++------ .../09/GHSA-wp2p-q35g-3rjj/GHSA-wp2p-q35g-3rjj.json | 4 +--- .../09/GHSA-wpfc-3w63-g4hm/GHSA-wpfc-3w63-g4hm.json | 4 +--- .../09/GHSA-x6gq-467r-hwcc/GHSA-x6gq-467r-hwcc.json | 4 +--- .../09/GHSA-x9gm-qxhh-rf75/GHSA-x9gm-qxhh-rf75.json | 4 +--- .../09/GHSA-xwqw-rf2q-xmhf/GHSA-xwqw-rf2q-xmhf.json | 8 ++------ .../05/GHSA-5r9g-j7jj-hw6c/GHSA-5r9g-j7jj-hw6c.json | 4 +--- .../05/GHSA-9347-9w64-q5wp/GHSA-9347-9w64-q5wp.json | 4 +--- .../05/GHSA-9ccm-g362-2r35/GHSA-9ccm-g362-2r35.json | 4 +--- .../05/GHSA-9pqx-g3jh-qpqq/GHSA-9pqx-g3jh-qpqq.json | 4 +--- .../05/GHSA-h6c8-x5r3-pm88/GHSA-h6c8-x5r3-pm88.json | 4 +--- .../05/GHSA-w8vh-5v64-j3vr/GHSA-w8vh-5v64-j3vr.json | 4 +--- .../05/GHSA-wxqg-fg7v-mmc6/GHSA-wxqg-fg7v-mmc6.json | 4 +--- .../05/GHSA-x5fc-pgpx-59j5/GHSA-x5fc-pgpx-59j5.json | 8 ++------ .../10/GHSA-fc4h-xcf3-qj5f/GHSA-fc4h-xcf3-qj5f.json | 12 +++--------- .../07/GHSA-4q66-g4mm-8rg5/GHSA-4q66-g4mm-8rg5.json | 8 ++------ .../04/GHSA-j5vm-7qcc-2wwg/GHSA-j5vm-7qcc-2wwg.json | 4 +--- .../12/GHSA-fc22-jfw7-2qhg/GHSA-fc22-jfw7-2qhg.json | 4 +--- .../12/GHSA-wrh5-96rf-7qq2/GHSA-wrh5-96rf-7qq2.json | 4 +--- .../05/GHSA-2393-f5cc-c6cc/GHSA-2393-f5cc-c6cc.json | 8 ++------ .../05/GHSA-244f-3h24-62fj/GHSA-244f-3h24-62fj.json | 4 +--- .../05/GHSA-246x-mh97-f8h6/GHSA-246x-mh97-f8h6.json | 8 ++------ .../05/GHSA-2488-7mjj-wx6f/GHSA-2488-7mjj-wx6f.json | 8 ++------ .../05/GHSA-24qv-68gq-r7hr/GHSA-24qv-68gq-r7hr.json | 12 +++--------- .../05/GHSA-24qv-pghr-gg8x/GHSA-24qv-pghr-gg8x.json | 8 ++------ .../05/GHSA-258w-xxxf-v3q9/GHSA-258w-xxxf-v3q9.json | 8 ++------ .../05/GHSA-25gj-gvw5-5xcq/GHSA-25gj-gvw5-5xcq.json | 8 ++------ .../05/GHSA-26pc-wx8w-v5vj/GHSA-26pc-wx8w-v5vj.json | 8 ++------ .../05/GHSA-273m-fmw2-8c3p/GHSA-273m-fmw2-8c3p.json | 8 ++------ .../05/GHSA-279g-qmgj-gvvw/GHSA-279g-qmgj-gvvw.json | 8 ++------ .../05/GHSA-27vr-69mf-gx49/GHSA-27vr-69mf-gx49.json | 8 ++------ .../05/GHSA-289x-vwg3-v978/GHSA-289x-vwg3-v978.json | 4 +--- .../05/GHSA-28wv-jqvv-4p3g/GHSA-28wv-jqvv-4p3g.json | 12 +++--------- .../05/GHSA-297c-8rmr-xrxf/GHSA-297c-8rmr-xrxf.json | 12 +++--------- .../05/GHSA-29cj-vw65-6494/GHSA-29cj-vw65-6494.json | 4 +--- .../05/GHSA-2c6r-gxwp-v69j/GHSA-2c6r-gxwp-v69j.json | 8 ++------ .../05/GHSA-2f82-6hr5-qm62/GHSA-2f82-6hr5-qm62.json | 8 ++------ .../05/GHSA-2fvm-j35v-vj7q/GHSA-2fvm-j35v-vj7q.json | 8 ++------ .../05/GHSA-2g6p-p8r8-fqpm/GHSA-2g6p-p8r8-fqpm.json | 8 ++------ .../05/GHSA-2h3c-w4jr-c2mr/GHSA-2h3c-w4jr-c2mr.json | 8 ++------ .../05/GHSA-2j7j-mg3j-2mr8/GHSA-2j7j-mg3j-2mr8.json | 8 ++------ .../05/GHSA-2j9f-fxq3-5v7w/GHSA-2j9f-fxq3-5v7w.json | 12 +++--------- .../05/GHSA-2j9m-xmx2-hj4v/GHSA-2j9m-xmx2-hj4v.json | 8 ++------ .../05/GHSA-2jhx-jvpp-rf85/GHSA-2jhx-jvpp-rf85.json | 8 ++------ .../05/GHSA-2q27-7mjr-47w9/GHSA-2q27-7mjr-47w9.json | 12 +++--------- .../05/GHSA-2qqv-pxvf-45vw/GHSA-2qqv-pxvf-45vw.json | 8 ++------ .../05/GHSA-2rfj-w5wq-m6cg/GHSA-2rfj-w5wq-m6cg.json | 8 ++------ .../05/GHSA-2rh2-8h38-pqp8/GHSA-2rh2-8h38-pqp8.json | 8 ++------ .../05/GHSA-2w54-x3qx-fw7c/GHSA-2w54-x3qx-fw7c.json | 12 +++--------- .../05/GHSA-2w57-h28r-gmwf/GHSA-2w57-h28r-gmwf.json | 8 ++------ .../05/GHSA-2xqh-v5fc-3q4g/GHSA-2xqh-v5fc-3q4g.json | 8 ++------ .../05/GHSA-338p-3995-mggv/GHSA-338p-3995-mggv.json | 8 ++------ .../05/GHSA-33cc-8pcc-ph75/GHSA-33cc-8pcc-ph75.json | 8 ++------ .../05/GHSA-33q4-669f-3r2r/GHSA-33q4-669f-3r2r.json | 12 +++--------- .../05/GHSA-3448-7xq8-p7m9/GHSA-3448-7xq8-p7m9.json | 8 ++------ .../05/GHSA-346q-mh4q-v382/GHSA-346q-mh4q-v382.json | 8 ++------ .../05/GHSA-36mh-7278-8282/GHSA-36mh-7278-8282.json | 8 ++------ .../05/GHSA-36qm-9899-6333/GHSA-36qm-9899-6333.json | 8 ++------ .../05/GHSA-375f-qm2g-pw3c/GHSA-375f-qm2g-pw3c.json | 12 +++--------- .../05/GHSA-37gq-89mf-f5ph/GHSA-37gq-89mf-f5ph.json | 8 ++------ .../05/GHSA-3878-7xhc-2g3f/GHSA-3878-7xhc-2g3f.json | 12 +++--------- .../05/GHSA-38g7-cph9-j9g7/GHSA-38g7-cph9-j9g7.json | 8 ++------ .../05/GHSA-38v5-c98r-m7vc/GHSA-38v5-c98r-m7vc.json | 4 +--- .../05/GHSA-39c9-vp8c-xpgv/GHSA-39c9-vp8c-xpgv.json | 8 ++------ .../05/GHSA-39hh-ghcg-pg9w/GHSA-39hh-ghcg-pg9w.json | 8 ++------ .../05/GHSA-3f25-9wj6-fhrv/GHSA-3f25-9wj6-fhrv.json | 8 ++------ .../05/GHSA-3g53-hh59-7f34/GHSA-3g53-hh59-7f34.json | 8 ++------ .../05/GHSA-3g5f-wchp-h22r/GHSA-3g5f-wchp-h22r.json | 4 +--- .../05/GHSA-3h5j-fwx4-2458/GHSA-3h5j-fwx4-2458.json | 4 +--- .../05/GHSA-3h6p-jvww-q7w3/GHSA-3h6p-jvww-q7w3.json | 8 ++------ .../05/GHSA-3hp9-895x-43v5/GHSA-3hp9-895x-43v5.json | 8 ++------ .../05/GHSA-3j7q-63j6-c36q/GHSA-3j7q-63j6-c36q.json | 8 ++------ .../05/GHSA-3mqj-g336-hgj5/GHSA-3mqj-g336-hgj5.json | 8 ++------ .../05/GHSA-3mwp-4m88-3vhv/GHSA-3mwp-4m88-3vhv.json | 12 +++--------- .../05/GHSA-3p9x-xxjc-hw5p/GHSA-3p9x-xxjc-hw5p.json | 12 +++--------- .../05/GHSA-3qp2-whc5-gp7w/GHSA-3qp2-whc5-gp7w.json | 4 +--- .../05/GHSA-3qvq-5r47-f846/GHSA-3qvq-5r47-f846.json | 12 +++--------- .../05/GHSA-3vgr-923v-gwpf/GHSA-3vgr-923v-gwpf.json | 8 ++------ .../05/GHSA-3vh8-3f6g-98cq/GHSA-3vh8-3f6g-98cq.json | 12 +++--------- .../05/GHSA-3vv6-wvwg-f6r4/GHSA-3vv6-wvwg-f6r4.json | 8 ++------ .../05/GHSA-3x3h-397m-6f9w/GHSA-3x3h-397m-6f9w.json | 8 ++------ .../05/GHSA-3x46-vw5g-qxj4/GHSA-3x46-vw5g-qxj4.json | 12 +++--------- .../05/GHSA-3xq6-78gm-vp7x/GHSA-3xq6-78gm-vp7x.json | 8 ++------ .../05/GHSA-436m-674g-w39v/GHSA-436m-674g-w39v.json | 12 +++--------- .../05/GHSA-45c8-ff6w-r2c9/GHSA-45c8-ff6w-r2c9.json | 8 ++------ .../05/GHSA-45pf-j52c-f2w7/GHSA-45pf-j52c-f2w7.json | 8 ++------ .../05/GHSA-468j-7q62-ffj2/GHSA-468j-7q62-ffj2.json | 4 +--- .../05/GHSA-46c5-27qx-2w2f/GHSA-46c5-27qx-2w2f.json | 8 ++------ .../05/GHSA-4729-w6h8-2738/GHSA-4729-w6h8-2738.json | 8 ++------ .../05/GHSA-47hh-2ggx-7r2j/GHSA-47hh-2ggx-7r2j.json | 8 ++------ .../05/GHSA-47q4-h3fv-9577/GHSA-47q4-h3fv-9577.json | 8 ++------ .../05/GHSA-47x6-r8v9-4w8c/GHSA-47x6-r8v9-4w8c.json | 8 ++------ .../05/GHSA-48gq-3cvf-8xfm/GHSA-48gq-3cvf-8xfm.json | 8 ++------ .../05/GHSA-49cq-qw4q-w2wj/GHSA-49cq-qw4q-w2wj.json | 8 ++------ .../05/GHSA-49xh-hg4f-jcq3/GHSA-49xh-hg4f-jcq3.json | 12 +++--------- .../05/GHSA-4g35-r4h2-vfq3/GHSA-4g35-r4h2-vfq3.json | 12 +++--------- .../05/GHSA-4gp7-wgqw-q868/GHSA-4gp7-wgqw-q868.json | 8 ++------ .../05/GHSA-4hpg-x5qx-73m8/GHSA-4hpg-x5qx-73m8.json | 4 +--- .../05/GHSA-4mqr-xvcr-x642/GHSA-4mqr-xvcr-x642.json | 8 ++------ .../05/GHSA-4q2c-8372-v56h/GHSA-4q2c-8372-v56h.json | 12 +++--------- .../05/GHSA-4rjc-jcg6-mw6m/GHSA-4rjc-jcg6-mw6m.json | 8 ++------ .../05/GHSA-4rjp-9xf6-39jc/GHSA-4rjp-9xf6-39jc.json | 8 ++------ .../05/GHSA-4vjj-hp93-6mc6/GHSA-4vjj-hp93-6mc6.json | 8 ++------ .../05/GHSA-4xj8-gc87-984x/GHSA-4xj8-gc87-984x.json | 8 ++------ .../05/GHSA-53r8-3f8w-9g8r/GHSA-53r8-3f8w-9g8r.json | 12 +++--------- .../05/GHSA-53w3-3r6p-4x3w/GHSA-53w3-3r6p-4x3w.json | 8 ++------ .../05/GHSA-53wq-r63f-m33q/GHSA-53wq-r63f-m33q.json | 4 +--- .../05/GHSA-558p-xx6x-v8w9/GHSA-558p-xx6x-v8w9.json | 12 +++--------- .../05/GHSA-56gm-wg67-34qm/GHSA-56gm-wg67-34qm.json | 8 ++------ .../05/GHSA-56x7-v79h-p2jx/GHSA-56x7-v79h-p2jx.json | 8 ++------ .../05/GHSA-577f-839j-8wgf/GHSA-577f-839j-8wgf.json | 8 ++------ .../05/GHSA-592x-36wc-68g2/GHSA-592x-36wc-68g2.json | 12 +++--------- .../05/GHSA-597x-6f4c-7x29/GHSA-597x-6f4c-7x29.json | 8 ++------ .../05/GHSA-59gx-rqrh-9rhc/GHSA-59gx-rqrh-9rhc.json | 8 ++------ .../05/GHSA-5f7m-6v8p-qcr4/GHSA-5f7m-6v8p-qcr4.json | 8 ++------ .../05/GHSA-5f85-8p5w-q6v9/GHSA-5f85-8p5w-q6v9.json | 12 +++--------- .../05/GHSA-5fvm-xcw3-wc6v/GHSA-5fvm-xcw3-wc6v.json | 8 ++------ .../05/GHSA-5gg2-hxgm-989h/GHSA-5gg2-hxgm-989h.json | 8 ++------ .../05/GHSA-5j7f-pmgc-6f48/GHSA-5j7f-pmgc-6f48.json | 12 +++--------- .../05/GHSA-5jcp-c7cj-7694/GHSA-5jcp-c7cj-7694.json | 8 ++------ .../05/GHSA-5jf4-j2rc-rh9x/GHSA-5jf4-j2rc-rh9x.json | 8 ++------ .../05/GHSA-5mch-9pg5-xxhh/GHSA-5mch-9pg5-xxhh.json | 8 ++------ .../05/GHSA-5p6w-mpm7-9f76/GHSA-5p6w-mpm7-9f76.json | 12 +++--------- .../05/GHSA-5p7m-fwc2-2ggr/GHSA-5p7m-fwc2-2ggr.json | 4 +--- .../05/GHSA-5pm4-7676-v58f/GHSA-5pm4-7676-v58f.json | 8 ++------ .../05/GHSA-5r7f-6hmm-m99p/GHSA-5r7f-6hmm-m99p.json | 8 ++------ .../05/GHSA-5v5q-p7mc-784j/GHSA-5v5q-p7mc-784j.json | 8 ++------ .../05/GHSA-5w5c-w4c9-m2w4/GHSA-5w5c-w4c9-m2w4.json | 12 +++--------- .../05/GHSA-5whv-73m7-58qq/GHSA-5whv-73m7-58qq.json | 12 +++--------- .../05/GHSA-5xp7-f74h-2h36/GHSA-5xp7-f74h-2h36.json | 8 ++------ .../05/GHSA-62w5-fwxx-rpgg/GHSA-62w5-fwxx-rpgg.json | 12 +++--------- .../05/GHSA-63rc-vm2w-wg97/GHSA-63rc-vm2w-wg97.json | 8 ++------ .../05/GHSA-656q-c3hc-863w/GHSA-656q-c3hc-863w.json | 4 +--- .../05/GHSA-65gc-65c8-rc75/GHSA-65gc-65c8-rc75.json | 4 +--- .../05/GHSA-65qr-hw9g-m785/GHSA-65qr-hw9g-m785.json | 12 +++--------- .../05/GHSA-66v8-xg3x-62pv/GHSA-66v8-xg3x-62pv.json | 8 ++------ .../05/GHSA-6764-3gh7-vvcp/GHSA-6764-3gh7-vvcp.json | 4 +--- .../05/GHSA-67cg-f67f-c8v9/GHSA-67cg-f67f-c8v9.json | 8 ++------ .../05/GHSA-67mw-49pc-x48c/GHSA-67mw-49pc-x48c.json | 12 +++--------- .../05/GHSA-67wg-9mvv-jfqw/GHSA-67wg-9mvv-jfqw.json | 12 +++--------- .../05/GHSA-68h9-7525-2j7f/GHSA-68h9-7525-2j7f.json | 8 ++------ .../05/GHSA-68w9-3qgr-fr28/GHSA-68w9-3qgr-fr28.json | 12 +++--------- .../05/GHSA-68xf-96r7-mr5g/GHSA-68xf-96r7-mr5g.json | 8 ++------ .../05/GHSA-695q-548v-ghxf/GHSA-695q-548v-ghxf.json | 4 +--- .../05/GHSA-6c3g-9f6c-6374/GHSA-6c3g-9f6c-6374.json | 12 +++--------- .../05/GHSA-6cqm-x4h5-qwm3/GHSA-6cqm-x4h5-qwm3.json | 8 ++------ .../05/GHSA-6fc7-q4pg-x7jx/GHSA-6fc7-q4pg-x7jx.json | 8 ++------ .../05/GHSA-6gc7-g2p6-mq5h/GHSA-6gc7-g2p6-mq5h.json | 4 +--- .../05/GHSA-6grr-7qqf-x376/GHSA-6grr-7qqf-x376.json | 12 +++--------- .../05/GHSA-6mgm-2wjr-c3v5/GHSA-6mgm-2wjr-c3v5.json | 8 ++------ .../05/GHSA-6pph-8pg8-6g8w/GHSA-6pph-8pg8-6g8w.json | 8 ++------ .../05/GHSA-6r26-5g48-43w4/GHSA-6r26-5g48-43w4.json | 8 ++------ .../05/GHSA-6rrf-r6h8-jh4q/GHSA-6rrf-r6h8-jh4q.json | 4 +--- .../05/GHSA-6vh5-8hmp-c68w/GHSA-6vh5-8hmp-c68w.json | 8 ++------ .../05/GHSA-6vqm-57vp-243g/GHSA-6vqm-57vp-243g.json | 12 +++--------- .../05/GHSA-6vrp-v74q-rxw9/GHSA-6vrp-v74q-rxw9.json | 4 +--- .../05/GHSA-6wq2-x574-7c7m/GHSA-6wq2-x574-7c7m.json | 12 +++--------- .../05/GHSA-6x23-g67f-x44h/GHSA-6x23-g67f-x44h.json | 12 +++--------- .../05/GHSA-6x8f-7m3j-wphq/GHSA-6x8f-7m3j-wphq.json | 8 ++------ .../05/GHSA-6xwr-cqxm-ch7r/GHSA-6xwr-cqxm-ch7r.json | 8 ++------ .../05/GHSA-72fq-mcfp-rpj7/GHSA-72fq-mcfp-rpj7.json | 4 +--- .../05/GHSA-72h4-mh2w-w3p4/GHSA-72h4-mh2w-w3p4.json | 8 ++------ .../05/GHSA-72hv-673g-m6mv/GHSA-72hv-673g-m6mv.json | 8 ++------ .../05/GHSA-72wm-564m-28mr/GHSA-72wm-564m-28mr.json | 8 ++------ .../05/GHSA-764h-vg9f-x4pp/GHSA-764h-vg9f-x4pp.json | 8 ++------ .../05/GHSA-76cm-fcfw-phwh/GHSA-76cm-fcfw-phwh.json | 8 ++------ .../05/GHSA-76f8-93vw-4mch/GHSA-76f8-93vw-4mch.json | 8 ++------ .../05/GHSA-78vh-xw9w-vv6w/GHSA-78vh-xw9w-vv6w.json | 8 ++------ .../05/GHSA-792c-fhxf-x9jx/GHSA-792c-fhxf-x9jx.json | 12 +++--------- .../05/GHSA-7c37-p4gh-wrh2/GHSA-7c37-p4gh-wrh2.json | 8 ++------ .../05/GHSA-7cj3-pvh2-r7mg/GHSA-7cj3-pvh2-r7mg.json | 4 +--- .../05/GHSA-7f3h-668h-399r/GHSA-7f3h-668h-399r.json | 8 ++------ .../05/GHSA-7ffr-3jq4-9xpc/GHSA-7ffr-3jq4-9xpc.json | 12 +++--------- .../05/GHSA-7gp5-m68f-f3xp/GHSA-7gp5-m68f-f3xp.json | 8 ++------ .../05/GHSA-7h8q-3jfw-6gxv/GHSA-7h8q-3jfw-6gxv.json | 12 +++--------- .../05/GHSA-7mfx-869f-5w95/GHSA-7mfx-869f-5w95.json | 8 ++------ .../05/GHSA-7mgj-mxcg-g7rv/GHSA-7mgj-mxcg-g7rv.json | 12 +++--------- .../05/GHSA-7p83-r395-v6hj/GHSA-7p83-r395-v6hj.json | 12 +++--------- .../05/GHSA-7pwg-g5rr-fxr7/GHSA-7pwg-g5rr-fxr7.json | 8 ++------ .../05/GHSA-7qq6-xfqx-v945/GHSA-7qq6-xfqx-v945.json | 12 +++--------- .../05/GHSA-7qrm-23cw-h659/GHSA-7qrm-23cw-h659.json | 8 ++------ .../05/GHSA-7qx7-j8jj-2jrg/GHSA-7qx7-j8jj-2jrg.json | 8 ++------ .../05/GHSA-7rqg-33f4-5488/GHSA-7rqg-33f4-5488.json | 8 ++------ .../05/GHSA-7v4w-hvhc-jxvp/GHSA-7v4w-hvhc-jxvp.json | 8 ++------ .../05/GHSA-7w4j-5c52-c6m8/GHSA-7w4j-5c52-c6m8.json | 8 ++------ .../05/GHSA-7wm2-mr93-6fq4/GHSA-7wm2-mr93-6fq4.json | 8 ++------ .../05/GHSA-7xmh-48w2-qq3p/GHSA-7xmh-48w2-qq3p.json | 8 ++------ .../05/GHSA-7xqc-5x2g-6vmp/GHSA-7xqc-5x2g-6vmp.json | 8 ++------ .../05/GHSA-7xv5-3986-m893/GHSA-7xv5-3986-m893.json | 8 ++------ .../05/GHSA-7xxp-vg6c-3rr8/GHSA-7xxp-vg6c-3rr8.json | 8 ++------ .../05/GHSA-825v-cg5c-3mc8/GHSA-825v-cg5c-3mc8.json | 8 ++------ .../05/GHSA-82x4-245q-4whp/GHSA-82x4-245q-4whp.json | 8 ++------ .../05/GHSA-82x9-mw4h-vm66/GHSA-82x9-mw4h-vm66.json | 12 +++--------- .../05/GHSA-83rc-g6w9-vgqg/GHSA-83rc-g6w9-vgqg.json | 8 ++------ .../05/GHSA-83vr-hv42-q4v5/GHSA-83vr-hv42-q4v5.json | 12 +++--------- .../05/GHSA-85f9-vx62-63wg/GHSA-85f9-vx62-63wg.json | 12 +++--------- .../05/GHSA-8686-7jv2-5qvr/GHSA-8686-7jv2-5qvr.json | 12 +++--------- .../05/GHSA-86rg-m4jm-h267/GHSA-86rg-m4jm-h267.json | 12 +++--------- .../05/GHSA-87xv-r72c-3f8q/GHSA-87xv-r72c-3f8q.json | 8 ++------ .../05/GHSA-894g-q9r7-4xv9/GHSA-894g-q9r7-4xv9.json | 12 +++--------- .../05/GHSA-89h9-hfwf-446p/GHSA-89h9-hfwf-446p.json | 12 +++--------- .../05/GHSA-8cjx-h52f-69jq/GHSA-8cjx-h52f-69jq.json | 8 ++------ .../05/GHSA-8ffx-hxvj-6frg/GHSA-8ffx-hxvj-6frg.json | 8 ++------ .../05/GHSA-8frr-8v9h-5c7m/GHSA-8frr-8v9h-5c7m.json | 8 ++------ .../05/GHSA-8fvc-27h9-w54p/GHSA-8fvc-27h9-w54p.json | 8 ++------ .../05/GHSA-8g6p-72jw-r627/GHSA-8g6p-72jw-r627.json | 4 +--- .../05/GHSA-8gpx-h5gv-p8m4/GHSA-8gpx-h5gv-p8m4.json | 12 +++--------- .../05/GHSA-8h69-3837-vxvg/GHSA-8h69-3837-vxvg.json | 8 ++------ .../05/GHSA-8hcx-fwhr-833g/GHSA-8hcx-fwhr-833g.json | 12 +++--------- .../05/GHSA-8hjp-49vf-w2fg/GHSA-8hjp-49vf-w2fg.json | 8 ++------ .../05/GHSA-8j35-78wg-6w8g/GHSA-8j35-78wg-6w8g.json | 8 ++------ .../05/GHSA-8j8f-9c88-qr6w/GHSA-8j8f-9c88-qr6w.json | 12 +++--------- .../05/GHSA-8jh8-jfrv-8pr8/GHSA-8jh8-jfrv-8pr8.json | 12 +++--------- .../05/GHSA-8m2m-6q73-mwgf/GHSA-8m2m-6q73-mwgf.json | 8 ++------ .../05/GHSA-8pp3-83rm-9hqg/GHSA-8pp3-83rm-9hqg.json | 8 ++------ .../05/GHSA-8q69-hjgc-cj8r/GHSA-8q69-hjgc-cj8r.json | 12 +++--------- .../05/GHSA-8rgp-cgf3-c9q6/GHSA-8rgp-cgf3-c9q6.json | 4 +--- .../05/GHSA-8v57-3pf3-74jp/GHSA-8v57-3pf3-74jp.json | 12 +++--------- .../05/GHSA-8vqq-grj6-7fxj/GHSA-8vqq-grj6-7fxj.json | 12 +++--------- .../05/GHSA-8vvf-gjr2-64v2/GHSA-8vvf-gjr2-64v2.json | 8 ++------ .../05/GHSA-8w63-v37h-869q/GHSA-8w63-v37h-869q.json | 12 +++--------- .../05/GHSA-8w6q-f674-974j/GHSA-8w6q-f674-974j.json | 12 +++--------- .../05/GHSA-92p2-532r-cg7m/GHSA-92p2-532r-cg7m.json | 8 ++------ .../05/GHSA-93rm-7vw9-v636/GHSA-93rm-7vw9-v636.json | 8 ++------ .../05/GHSA-958x-j3cw-gmg7/GHSA-958x-j3cw-gmg7.json | 4 +--- .../05/GHSA-95qj-39w7-8cp5/GHSA-95qj-39w7-8cp5.json | 8 ++------ .../05/GHSA-9637-782j-wq7f/GHSA-9637-782j-wq7f.json | 8 ++------ .../05/GHSA-96rh-7h9m-8c7h/GHSA-96rh-7h9m-8c7h.json | 8 ++------ .../05/GHSA-96xr-96m2-7jh5/GHSA-96xr-96m2-7jh5.json | 8 ++------ .../05/GHSA-97h6-qhh4-8hrg/GHSA-97h6-qhh4-8hrg.json | 12 +++--------- .../05/GHSA-995v-5wqc-hr59/GHSA-995v-5wqc-hr59.json | 8 ++------ .../05/GHSA-99hm-3p2p-q76h/GHSA-99hm-3p2p-q76h.json | 8 ++------ .../05/GHSA-99mq-x8pj-x84m/GHSA-99mq-x8pj-x84m.json | 8 ++------ .../05/GHSA-99p9-2394-3rrr/GHSA-99p9-2394-3rrr.json | 12 +++--------- .../05/GHSA-9cmr-qxx9-8225/GHSA-9cmr-qxx9-8225.json | 8 ++------ .../05/GHSA-9cxr-7vrj-vpj8/GHSA-9cxr-7vrj-vpj8.json | 8 ++------ .../05/GHSA-9g4j-8frf-qcf7/GHSA-9g4j-8frf-qcf7.json | 12 +++--------- .../05/GHSA-9gf3-g48x-h2cg/GHSA-9gf3-g48x-h2cg.json | 8 ++------ .../05/GHSA-9hgg-58hp-8g4p/GHSA-9hgg-58hp-8g4p.json | 8 ++------ .../05/GHSA-9j8x-882c-5j43/GHSA-9j8x-882c-5j43.json | 12 +++--------- .../05/GHSA-9mmm-2pp6-2xv5/GHSA-9mmm-2pp6-2xv5.json | 12 +++--------- .../05/GHSA-9mw5-93p4-vpwg/GHSA-9mw5-93p4-vpwg.json | 8 ++------ .../05/GHSA-9pr9-5973-55vh/GHSA-9pr9-5973-55vh.json | 12 +++--------- .../05/GHSA-9vrp-9773-9m9j/GHSA-9vrp-9773-9m9j.json | 12 +++--------- .../05/GHSA-9w58-jgcc-jhrf/GHSA-9w58-jgcc-jhrf.json | 12 +++--------- .../05/GHSA-9wv3-hv7v-qxrg/GHSA-9wv3-hv7v-qxrg.json | 12 +++--------- .../05/GHSA-9wxp-fppw-48c2/GHSA-9wxp-fppw-48c2.json | 8 ++------ .../05/GHSA-9x4m-jvc5-fj72/GHSA-9x4m-jvc5-fj72.json | 12 +++--------- .../05/GHSA-9x7x-fv7w-r8pq/GHSA-9x7x-fv7w-r8pq.json | 4 +--- .../05/GHSA-9x96-778q-7h9c/GHSA-9x96-778q-7h9c.json | 12 +++--------- .../05/GHSA-9xhf-xpf3-3rx2/GHSA-9xhf-xpf3-3rx2.json | 12 +++--------- .../05/GHSA-9xmr-23qw-g3q8/GHSA-9xmr-23qw-g3q8.json | 12 +++--------- .../05/GHSA-9xph-fqp4-xrxv/GHSA-9xph-fqp4-xrxv.json | 12 +++--------- .../05/GHSA-9xwq-p786-gg42/GHSA-9xwq-p786-gg42.json | 8 ++------ .../05/GHSA-c3p6-f6m3-rwcg/GHSA-c3p6-f6m3-rwcg.json | 8 ++------ .../05/GHSA-c3q3-cfjx-vqpr/GHSA-c3q3-cfjx-vqpr.json | 8 ++------ .../05/GHSA-c4xm-h85g-8hxm/GHSA-c4xm-h85g-8hxm.json | 8 ++------ .../05/GHSA-c6gm-3h36-cg93/GHSA-c6gm-3h36-cg93.json | 8 ++------ .../05/GHSA-c6jg-f33g-jwfh/GHSA-c6jg-f33g-jwfh.json | 8 ++------ .../05/GHSA-c6x6-8wx3-q682/GHSA-c6x6-8wx3-q682.json | 8 ++------ .../05/GHSA-c794-pcqc-7vcj/GHSA-c794-pcqc-7vcj.json | 8 ++------ .../05/GHSA-c7cj-qmq2-j642/GHSA-c7cj-qmq2-j642.json | 8 ++------ .../05/GHSA-c7qv-v9rv-f39q/GHSA-c7qv-v9rv-f39q.json | 12 +++--------- .../05/GHSA-c8jh-w9vh-3vj2/GHSA-c8jh-w9vh-3vj2.json | 8 ++------ .../05/GHSA-c8vr-hv4g-cffv/GHSA-c8vr-hv4g-cffv.json | 8 ++------ .../05/GHSA-ccmr-7m45-27wf/GHSA-ccmr-7m45-27wf.json | 8 ++------ .../05/GHSA-cfg9-hj54-h2q5/GHSA-cfg9-hj54-h2q5.json | 8 ++------ .../05/GHSA-cg98-rw53-3v8h/GHSA-cg98-rw53-3v8h.json | 8 ++------ .../05/GHSA-cgc8-fwjc-7pcm/GHSA-cgc8-fwjc-7pcm.json | 12 +++--------- .../05/GHSA-ch33-cr79-ww57/GHSA-ch33-cr79-ww57.json | 8 ++------ .../05/GHSA-chv5-82mw-88m2/GHSA-chv5-82mw-88m2.json | 8 ++------ .../05/GHSA-cjgr-x5fp-pc84/GHSA-cjgr-x5fp-pc84.json | 8 ++------ .../05/GHSA-cjm9-573w-9w68/GHSA-cjm9-573w-9w68.json | 12 +++--------- .../05/GHSA-cm3h-p9x9-h6fr/GHSA-cm3h-p9x9-h6fr.json | 12 +++--------- .../05/GHSA-cm4p-rvrm-3xfj/GHSA-cm4p-rvrm-3xfj.json | 8 ++------ .../05/GHSA-cm5w-ppq6-q69f/GHSA-cm5w-ppq6-q69f.json | 4 +--- .../05/GHSA-cp59-25hr-cr8x/GHSA-cp59-25hr-cr8x.json | 8 ++------ .../05/GHSA-cp62-q2rf-23j7/GHSA-cp62-q2rf-23j7.json | 8 ++------ .../05/GHSA-cq34-q55h-g2x8/GHSA-cq34-q55h-g2x8.json | 8 ++------ .../05/GHSA-cqx4-c72q-7rwm/GHSA-cqx4-c72q-7rwm.json | 8 ++------ .../05/GHSA-cw94-6xjr-p69w/GHSA-cw94-6xjr-p69w.json | 8 ++------ .../05/GHSA-cx3m-vxg2-pc6j/GHSA-cx3m-vxg2-pc6j.json | 8 ++------ .../05/GHSA-cx3p-mp6p-65g8/GHSA-cx3p-mp6p-65g8.json | 8 ++------ .../05/GHSA-f23m-xrhr-hq76/GHSA-f23m-xrhr-hq76.json | 12 +++--------- .../05/GHSA-f25w-5hcq-qm9g/GHSA-f25w-5hcq-qm9g.json | 8 ++------ .../05/GHSA-f2qp-3674-gwvc/GHSA-f2qp-3674-gwvc.json | 8 ++------ .../05/GHSA-f2x5-xv5g-cxfh/GHSA-f2x5-xv5g-cxfh.json | 8 ++------ .../05/GHSA-f425-pfvh-x64x/GHSA-f425-pfvh-x64x.json | 8 ++------ .../05/GHSA-f469-v24c-6rxv/GHSA-f469-v24c-6rxv.json | 8 ++------ .../05/GHSA-f5ff-4pfm-qv6p/GHSA-f5ff-4pfm-qv6p.json | 12 +++--------- .../05/GHSA-f6hj-jcpc-rwr6/GHSA-f6hj-jcpc-rwr6.json | 8 ++------ .../05/GHSA-f6r6-w5wr-6658/GHSA-f6r6-w5wr-6658.json | 12 +++--------- .../05/GHSA-f759-57pg-3gr7/GHSA-f759-57pg-3gr7.json | 12 +++--------- .../05/GHSA-f7cf-4vwj-vvw2/GHSA-f7cf-4vwj-vvw2.json | 8 ++------ .../05/GHSA-f7j8-j35p-xgv9/GHSA-f7j8-j35p-xgv9.json | 12 +++--------- .../05/GHSA-f7q8-24hw-vxqj/GHSA-f7q8-24hw-vxqj.json | 8 ++------ .../05/GHSA-f89c-82xp-m4w3/GHSA-f89c-82xp-m4w3.json | 8 ++------ .../05/GHSA-f8g8-rvj9-6xc4/GHSA-f8g8-rvj9-6xc4.json | 8 ++------ .../05/GHSA-f8mj-2m92-pmqv/GHSA-f8mj-2m92-pmqv.json | 8 ++------ .../05/GHSA-f92g-3pmp-x3pm/GHSA-f92g-3pmp-x3pm.json | 8 ++------ .../05/GHSA-f9ww-4p5f-wmx4/GHSA-f9ww-4p5f-wmx4.json | 8 ++------ .../05/GHSA-fc47-2qq8-v2v9/GHSA-fc47-2qq8-v2v9.json | 8 ++------ .../05/GHSA-fc59-q457-v9g7/GHSA-fc59-q457-v9g7.json | 8 ++------ .../05/GHSA-fcx9-c8rh-3996/GHSA-fcx9-c8rh-3996.json | 8 ++------ .../05/GHSA-ff2q-3hcj-r69j/GHSA-ff2q-3hcj-r69j.json | 12 +++--------- .../05/GHSA-fffm-ch8m-cvr3/GHSA-fffm-ch8m-cvr3.json | 12 +++--------- .../05/GHSA-fm2c-gm53-7rgj/GHSA-fm2c-gm53-7rgj.json | 8 ++------ .../05/GHSA-fm4v-7qrr-j4j9/GHSA-fm4v-7qrr-j4j9.json | 8 ++------ .../05/GHSA-fmf3-xj8j-qrw9/GHSA-fmf3-xj8j-qrw9.json | 8 ++------ .../05/GHSA-fp8w-ccf9-rfr2/GHSA-fp8w-ccf9-rfr2.json | 8 ++------ .../05/GHSA-fpv5-p692-m85v/GHSA-fpv5-p692-m85v.json | 12 +++--------- .../05/GHSA-fpw8-4262-vxvh/GHSA-fpw8-4262-vxvh.json | 8 ++------ .../05/GHSA-fq22-j475-7x9w/GHSA-fq22-j475-7x9w.json | 8 ++------ .../05/GHSA-fqrg-p497-vw5j/GHSA-fqrg-p497-vw5j.json | 8 ++------ .../05/GHSA-fr5h-m2rr-j3rh/GHSA-fr5h-m2rr-j3rh.json | 8 ++------ .../05/GHSA-fr7x-vvg8-f78x/GHSA-fr7x-vvg8-f78x.json | 8 ++------ .../05/GHSA-frmj-9v42-hrj4/GHSA-frmj-9v42-hrj4.json | 8 ++------ .../05/GHSA-fvgw-xjx9-w93q/GHSA-fvgw-xjx9-w93q.json | 8 ++------ .../05/GHSA-fvqm-vxff-q28h/GHSA-fvqm-vxff-q28h.json | 8 ++------ .../05/GHSA-g3rm-6wv6-vhw7/GHSA-g3rm-6wv6-vhw7.json | 8 ++------ .../05/GHSA-g3vv-27vh-7g43/GHSA-g3vv-27vh-7g43.json | 12 +++--------- .../05/GHSA-g42m-vjq2-x6h8/GHSA-g42m-vjq2-x6h8.json | 4 +--- .../05/GHSA-g4p4-g8hm-9prr/GHSA-g4p4-g8hm-9prr.json | 8 ++------ .../05/GHSA-g4v3-pwqw-vxwx/GHSA-g4v3-pwqw-vxwx.json | 8 ++------ .../05/GHSA-g5g5-whrh-grph/GHSA-g5g5-whrh-grph.json | 8 ++------ .../05/GHSA-g639-f2rm-mp66/GHSA-g639-f2rm-mp66.json | 4 +--- .../05/GHSA-g6jq-6gh8-6w33/GHSA-g6jq-6gh8-6w33.json | 8 ++------ .../05/GHSA-g6rq-v838-vj8q/GHSA-g6rq-v838-vj8q.json | 8 ++------ .../05/GHSA-g75m-cfx7-5qjp/GHSA-g75m-cfx7-5qjp.json | 8 ++------ .../05/GHSA-g76q-jc2x-v9j3/GHSA-g76q-jc2x-v9j3.json | 8 ++------ .../05/GHSA-g9ph-57wj-hfcf/GHSA-g9ph-57wj-hfcf.json | 12 +++--------- .../05/GHSA-g9rq-g8g7-67pr/GHSA-g9rq-g8g7-67pr.json | 8 ++------ .../05/GHSA-g9v3-gh27-qjh3/GHSA-g9v3-gh27-qjh3.json | 8 ++------ .../05/GHSA-gc43-r6hx-q44q/GHSA-gc43-r6hx-q44q.json | 8 ++------ .../05/GHSA-gc98-v57j-w56g/GHSA-gc98-v57j-w56g.json | 8 ++------ .../05/GHSA-gfh7-vc32-58w3/GHSA-gfh7-vc32-58w3.json | 8 ++------ .../05/GHSA-gfp7-hj9r-2gvm/GHSA-gfp7-hj9r-2gvm.json | 8 ++------ .../05/GHSA-gg68-5jj6-x44x/GHSA-gg68-5jj6-x44x.json | 8 ++------ .../05/GHSA-gg6r-73rm-mqpm/GHSA-gg6r-73rm-mqpm.json | 8 ++------ .../05/GHSA-ggg3-r6q5-m9wx/GHSA-ggg3-r6q5-m9wx.json | 8 ++------ .../05/GHSA-ggjw-c9jm-j9xw/GHSA-ggjw-c9jm-j9xw.json | 8 ++------ .../05/GHSA-ghgw-73mq-4pq7/GHSA-ghgw-73mq-4pq7.json | 8 ++------ .../05/GHSA-gjjp-x6r5-h5rj/GHSA-gjjp-x6r5-h5rj.json | 12 +++--------- .../05/GHSA-gm4r-22mh-3f5q/GHSA-gm4r-22mh-3f5q.json | 4 +--- .../05/GHSA-gvc5-x64j-cff4/GHSA-gvc5-x64j-cff4.json | 12 +++--------- .../05/GHSA-gwx5-cfhc-r2q8/GHSA-gwx5-cfhc-r2q8.json | 12 +++--------- .../05/GHSA-gx2c-5v6w-v894/GHSA-gx2c-5v6w-v894.json | 8 ++------ .../05/GHSA-h466-38fm-2cfq/GHSA-h466-38fm-2cfq.json | 8 ++------ .../05/GHSA-h4h3-g99f-6qf2/GHSA-h4h3-g99f-6qf2.json | 8 ++------ .../05/GHSA-h59f-qgvv-5qq2/GHSA-h59f-qgvv-5qq2.json | 12 +++--------- .../05/GHSA-h7f5-5qw4-27g2/GHSA-h7f5-5qw4-27g2.json | 8 ++------ .../05/GHSA-h898-wwmm-x6r5/GHSA-h898-wwmm-x6r5.json | 8 ++------ .../05/GHSA-h8w3-m7vj-q5mc/GHSA-h8w3-m7vj-q5mc.json | 8 ++------ .../05/GHSA-h964-v967-3qvg/GHSA-h964-v967-3qvg.json | 12 +++--------- .../05/GHSA-hc6g-g45p-5gpr/GHSA-hc6g-g45p-5gpr.json | 4 +--- .../05/GHSA-hcfg-mpgp-9qwq/GHSA-hcfg-mpgp-9qwq.json | 8 ++------ .../05/GHSA-hf4q-p7pr-fvwm/GHSA-hf4q-p7pr-fvwm.json | 8 ++------ .../05/GHSA-hfj4-xxjm-263f/GHSA-hfj4-xxjm-263f.json | 12 +++--------- .../05/GHSA-hh4m-7c6g-g8m7/GHSA-hh4m-7c6g-g8m7.json | 12 +++--------- .../05/GHSA-hjg5-38g6-376g/GHSA-hjg5-38g6-376g.json | 8 ++------ .../05/GHSA-hjq2-29hf-fwvr/GHSA-hjq2-29hf-fwvr.json | 8 ++------ .../05/GHSA-hmw4-xhrq-3643/GHSA-hmw4-xhrq-3643.json | 8 ++------ .../05/GHSA-hrp9-3qpf-pqmr/GHSA-hrp9-3qpf-pqmr.json | 12 +++--------- .../05/GHSA-hv7f-x5m2-phcj/GHSA-hv7f-x5m2-phcj.json | 8 ++------ .../05/GHSA-hv98-hvvq-xv3f/GHSA-hv98-hvvq-xv3f.json | 8 ++------ .../05/GHSA-hwmp-9mgr-qxqh/GHSA-hwmp-9mgr-qxqh.json | 4 +--- .../05/GHSA-hwpm-rvvp-6j8w/GHSA-hwpm-rvvp-6j8w.json | 12 +++--------- .../05/GHSA-hx4x-qj2r-6g94/GHSA-hx4x-qj2r-6g94.json | 8 ++------ .../05/GHSA-j2w3-2qhr-g4f8/GHSA-j2w3-2qhr-g4f8.json | 8 ++------ .../05/GHSA-j3g7-39r8-g36q/GHSA-j3g7-39r8-g36q.json | 4 +--- .../05/GHSA-j4x2-6mhf-rwcj/GHSA-j4x2-6mhf-rwcj.json | 8 ++------ .../05/GHSA-j645-9rx2-qmx3/GHSA-j645-9rx2-qmx3.json | 8 ++------ .../05/GHSA-j66v-p6vc-7j54/GHSA-j66v-p6vc-7j54.json | 12 +++--------- .../05/GHSA-j6j9-p64g-xmpc/GHSA-j6j9-p64g-xmpc.json | 12 +++--------- .../05/GHSA-j6pc-gqfr-h3qp/GHSA-j6pc-gqfr-h3qp.json | 8 ++------ .../05/GHSA-j7gx-8j2c-q46q/GHSA-j7gx-8j2c-q46q.json | 12 +++--------- .../05/GHSA-j7r5-h76v-5p9v/GHSA-j7r5-h76v-5p9v.json | 8 ++------ .../05/GHSA-j8gj-hp37-8qx9/GHSA-j8gj-hp37-8qx9.json | 8 ++------ .../05/GHSA-jf52-69wj-mgxf/GHSA-jf52-69wj-mgxf.json | 12 +++--------- .../05/GHSA-jfp6-96vh-f8h7/GHSA-jfp6-96vh-f8h7.json | 8 ++------ .../05/GHSA-jfpr-w2hm-9rpw/GHSA-jfpr-w2hm-9rpw.json | 8 ++------ .../05/GHSA-jg6w-qr2p-jj2x/GHSA-jg6w-qr2p-jj2x.json | 12 +++--------- .../05/GHSA-jhhx-fc29-rwx8/GHSA-jhhx-fc29-rwx8.json | 8 ++------ .../05/GHSA-jj42-23mj-m8hv/GHSA-jj42-23mj-m8hv.json | 8 ++------ .../05/GHSA-jjxg-hp5g-chxg/GHSA-jjxg-hp5g-chxg.json | 8 ++------ .../05/GHSA-jpjm-vqwj-fx52/GHSA-jpjm-vqwj-fx52.json | 12 +++--------- .../05/GHSA-jpqh-6mhc-2g4j/GHSA-jpqh-6mhc-2g4j.json | 4 +--- .../05/GHSA-jpxm-q897-vmrj/GHSA-jpxm-q897-vmrj.json | 8 ++------ .../05/GHSA-jq9h-634g-v84w/GHSA-jq9h-634g-v84w.json | 8 ++------ .../05/GHSA-jvm6-98cw-prpg/GHSA-jvm6-98cw-prpg.json | 8 ++------ .../05/GHSA-jwhg-44r5-gw4j/GHSA-jwhg-44r5-gw4j.json | 8 ++------ .../05/GHSA-jwx5-frfj-fvw3/GHSA-jwx5-frfj-fvw3.json | 8 ++------ .../05/GHSA-jxrq-6cjh-p9vf/GHSA-jxrq-6cjh-p9vf.json | 8 ++------ .../05/GHSA-m225-c64g-66w2/GHSA-m225-c64g-66w2.json | 8 ++------ .../05/GHSA-m2pg-wrmf-wpqf/GHSA-m2pg-wrmf-wpqf.json | 8 ++------ .../05/GHSA-m46m-9m8q-5jw3/GHSA-m46m-9m8q-5jw3.json | 12 +++--------- .../05/GHSA-m535-3h2v-5g4r/GHSA-m535-3h2v-5g4r.json | 4 +--- .../05/GHSA-m5qp-6cmg-5vw4/GHSA-m5qp-6cmg-5vw4.json | 8 ++------ .../05/GHSA-m5wm-pj42-wv8h/GHSA-m5wm-pj42-wv8h.json | 12 +++--------- .../05/GHSA-m6f9-v9gc-f7x3/GHSA-m6f9-v9gc-f7x3.json | 8 ++------ .../05/GHSA-m7pm-h6m7-mv8h/GHSA-m7pm-h6m7-mv8h.json | 8 ++------ .../05/GHSA-m978-2g9r-q8xc/GHSA-m978-2g9r-q8xc.json | 8 ++------ .../05/GHSA-m98g-x7x5-6mqf/GHSA-m98g-x7x5-6mqf.json | 8 ++------ .../05/GHSA-m9cx-9xfq-5qxc/GHSA-m9cx-9xfq-5qxc.json | 8 ++------ .../05/GHSA-m9rh-6r9f-m3hc/GHSA-m9rh-6r9f-m3hc.json | 8 ++------ .../05/GHSA-mcgr-4jxq-p7jr/GHSA-mcgr-4jxq-p7jr.json | 12 +++--------- .../05/GHSA-mf83-c25g-48r6/GHSA-mf83-c25g-48r6.json | 8 ++------ .../05/GHSA-mfm4-69wq-jq8q/GHSA-mfm4-69wq-jq8q.json | 12 +++--------- .../05/GHSA-mfv4-c5qx-wrp6/GHSA-mfv4-c5qx-wrp6.json | 4 +--- .../05/GHSA-mfvh-g94h-m34v/GHSA-mfvh-g94h-m34v.json | 8 ++------ .../05/GHSA-mh7p-qhw3-rgx4/GHSA-mh7p-qhw3-rgx4.json | 8 ++------ .../05/GHSA-mh9q-g26g-35gg/GHSA-mh9q-g26g-35gg.json | 8 ++------ .../05/GHSA-mhm5-qhmr-4x2g/GHSA-mhm5-qhmr-4x2g.json | 8 ++------ .../05/GHSA-mhrh-fcvq-wqv7/GHSA-mhrh-fcvq-wqv7.json | 12 +++--------- .../05/GHSA-mhw8-85rp-mw3x/GHSA-mhw8-85rp-mw3x.json | 8 ++------ .../05/GHSA-mjq5-4h2v-323x/GHSA-mjq5-4h2v-323x.json | 8 ++------ .../05/GHSA-mjr4-4fp3-3qf8/GHSA-mjr4-4fp3-3qf8.json | 8 ++------ .../05/GHSA-mjrx-98x2-x4rg/GHSA-mjrx-98x2-x4rg.json | 8 ++------ .../05/GHSA-mmgq-h7pc-9qc3/GHSA-mmgq-h7pc-9qc3.json | 12 +++--------- .../05/GHSA-mp26-cr2x-v76m/GHSA-mp26-cr2x-v76m.json | 8 ++------ .../05/GHSA-mpjr-rfjg-826r/GHSA-mpjr-rfjg-826r.json | 12 +++--------- .../05/GHSA-mq97-8pv9-vgwm/GHSA-mq97-8pv9-vgwm.json | 8 ++------ .../05/GHSA-mrmf-xh4j-5hxm/GHSA-mrmf-xh4j-5hxm.json | 8 ++------ .../05/GHSA-mrmg-vfrw-qcjm/GHSA-mrmg-vfrw-qcjm.json | 8 ++------ .../05/GHSA-mrvq-r8g7-548f/GHSA-mrvq-r8g7-548f.json | 8 ++------ .../05/GHSA-mv98-3pjv-4gv2/GHSA-mv98-3pjv-4gv2.json | 8 ++------ .../05/GHSA-mvmm-p2h2-cm73/GHSA-mvmm-p2h2-cm73.json | 4 +--- .../05/GHSA-mvxr-f9j3-hrhc/GHSA-mvxr-f9j3-hrhc.json | 12 +++--------- .../05/GHSA-p36v-wg2q-q2q7/GHSA-p36v-wg2q-q2q7.json | 8 ++------ .../05/GHSA-p3h3-36m3-9p9g/GHSA-p3h3-36m3-9p9g.json | 8 ++------ .../05/GHSA-p44h-q76r-8467/GHSA-p44h-q76r-8467.json | 12 +++--------- .../05/GHSA-p4g7-mgvx-4rmf/GHSA-p4g7-mgvx-4rmf.json | 4 +--- .../05/GHSA-p57r-mjxp-9www/GHSA-p57r-mjxp-9www.json | 12 +++--------- .../05/GHSA-p6h6-f79f-g6cp/GHSA-p6h6-f79f-g6cp.json | 8 ++------ .../05/GHSA-p75w-2534-vxxv/GHSA-p75w-2534-vxxv.json | 8 ++------ .../05/GHSA-p79r-6c8h-57c9/GHSA-p79r-6c8h-57c9.json | 8 ++------ .../05/GHSA-p7c6-3vqx-r8qj/GHSA-p7c6-3vqx-r8qj.json | 8 ++------ .../05/GHSA-p8qv-rw4q-gfw4/GHSA-p8qv-rw4q-gfw4.json | 4 +--- .../05/GHSA-p9rp-v9p7-xfmx/GHSA-p9rp-v9p7-xfmx.json | 12 +++--------- .../05/GHSA-pc9j-q3x9-p4rf/GHSA-pc9j-q3x9-p4rf.json | 12 +++--------- .../05/GHSA-pcc9-vv6w-47hr/GHSA-pcc9-vv6w-47hr.json | 8 ++------ .../05/GHSA-pf52-67rh-hjwm/GHSA-pf52-67rh-hjwm.json | 8 ++------ .../05/GHSA-pg33-rr7h-35v7/GHSA-pg33-rr7h-35v7.json | 8 ++------ .../05/GHSA-pgcx-m2j5-mvjj/GHSA-pgcx-m2j5-mvjj.json | 8 ++------ .../05/GHSA-pgrc-jfm5-7rm6/GHSA-pgrc-jfm5-7rm6.json | 12 +++--------- .../05/GHSA-ph3r-w9rq-hjpw/GHSA-ph3r-w9rq-hjpw.json | 8 ++------ .../05/GHSA-phxq-8cx9-m597/GHSA-phxq-8cx9-m597.json | 8 ++------ .../05/GHSA-pjx7-q3c9-2qpg/GHSA-pjx7-q3c9-2qpg.json | 8 ++------ .../05/GHSA-pjxh-wj35-vf37/GHSA-pjxh-wj35-vf37.json | 8 ++------ .../05/GHSA-pm45-g6fq-4hv9/GHSA-pm45-g6fq-4hv9.json | 12 +++--------- .../05/GHSA-pmvr-f574-5c53/GHSA-pmvr-f574-5c53.json | 4 +--- .../05/GHSA-pmx8-2f7x-fc82/GHSA-pmx8-2f7x-fc82.json | 8 ++------ .../05/GHSA-pp4m-55cm-6994/GHSA-pp4m-55cm-6994.json | 12 +++--------- .../05/GHSA-ppc8-8hw8-wp4w/GHSA-ppc8-8hw8-wp4w.json | 8 ++------ .../05/GHSA-pqgp-87m3-3238/GHSA-pqgp-87m3-3238.json | 8 ++------ .../05/GHSA-pr5m-wxj4-mr3r/GHSA-pr5m-wxj4-mr3r.json | 4 +--- .../05/GHSA-prc6-qwc4-rr5x/GHSA-prc6-qwc4-rr5x.json | 8 ++------ .../05/GHSA-pv84-jfm6-v66r/GHSA-pv84-jfm6-v66r.json | 8 ++------ .../05/GHSA-pvxg-g7h5-249r/GHSA-pvxg-g7h5-249r.json | 8 ++------ .../05/GHSA-pwh2-rcv8-v6g8/GHSA-pwh2-rcv8-v6g8.json | 12 +++--------- .../05/GHSA-pwpc-8v26-95vc/GHSA-pwpc-8v26-95vc.json | 12 +++--------- .../05/GHSA-pwqr-x6x9-wjxj/GHSA-pwqr-x6x9-wjxj.json | 8 ++------ .../05/GHSA-pxrq-c3v9-mhjh/GHSA-pxrq-c3v9-mhjh.json | 8 ++------ .../05/GHSA-q2p3-jh4c-pjx8/GHSA-q2p3-jh4c-pjx8.json | 8 ++------ .../05/GHSA-q2pp-wpvj-9w74/GHSA-q2pp-wpvj-9w74.json | 12 +++--------- .../05/GHSA-q2r3-489p-vqx4/GHSA-q2r3-489p-vqx4.json | 8 ++------ .../05/GHSA-q38r-jvfv-56gr/GHSA-q38r-jvfv-56gr.json | 12 +++--------- .../05/GHSA-q4g2-qggr-v63g/GHSA-q4g2-qggr-v63g.json | 8 ++------ .../05/GHSA-q6cw-386r-7f2m/GHSA-q6cw-386r-7f2m.json | 12 +++--------- .../05/GHSA-q8hh-59h8-qrwc/GHSA-q8hh-59h8-qrwc.json | 12 +++--------- .../05/GHSA-q8v6-vc7q-rpfx/GHSA-q8v6-vc7q-rpfx.json | 8 ++------ .../05/GHSA-q8x5-pw43-f3gm/GHSA-q8x5-pw43-f3gm.json | 8 ++------ .../05/GHSA-qf2q-r4v7-rv34/GHSA-qf2q-r4v7-rv34.json | 12 +++--------- .../05/GHSA-qf8r-pqcp-wxq3/GHSA-qf8r-pqcp-wxq3.json | 8 ++------ .../05/GHSA-qfqw-47f9-9jpp/GHSA-qfqw-47f9-9jpp.json | 4 +--- .../05/GHSA-qh4h-cqrv-r6qp/GHSA-qh4h-cqrv-r6qp.json | 8 ++------ .../05/GHSA-qjw3-ggxq-6875/GHSA-qjw3-ggxq-6875.json | 8 ++------ .../05/GHSA-qp78-349m-vrqw/GHSA-qp78-349m-vrqw.json | 8 ++------ .../05/GHSA-qp92-2q78-p3wp/GHSA-qp92-2q78-p3wp.json | 8 ++------ .../05/GHSA-qvv2-94xp-v7cc/GHSA-qvv2-94xp-v7cc.json | 8 ++------ .../05/GHSA-qw24-6ccm-w25c/GHSA-qw24-6ccm-w25c.json | 8 ++------ .../05/GHSA-qw2f-f6gc-7jwc/GHSA-qw2f-f6gc-7jwc.json | 8 ++------ .../05/GHSA-qw7j-pqgw-px85/GHSA-qw7j-pqgw-px85.json | 4 +--- .../05/GHSA-qwq6-r265-m9pq/GHSA-qwq6-r265-m9pq.json | 8 ++------ .../05/GHSA-qxhm-5fg4-r976/GHSA-qxhm-5fg4-r976.json | 8 ++------ .../05/GHSA-r3wh-w6m7-m5c3/GHSA-r3wh-w6m7-m5c3.json | 12 +++--------- .../05/GHSA-r4j2-8v9x-mm69/GHSA-r4j2-8v9x-mm69.json | 12 +++--------- .../05/GHSA-r4vf-g673-cmpw/GHSA-r4vf-g673-cmpw.json | 8 ++------ .../05/GHSA-r584-r284-xhg9/GHSA-r584-r284-xhg9.json | 12 +++--------- .../05/GHSA-r64g-3xg5-7gm7/GHSA-r64g-3xg5-7gm7.json | 4 +--- .../05/GHSA-r924-v8fv-v2r8/GHSA-r924-v8fv-v2r8.json | 12 +++--------- .../05/GHSA-r9f4-jmc5-f3xg/GHSA-r9f4-jmc5-f3xg.json | 8 ++------ .../05/GHSA-r9rr-8ghm-9j5g/GHSA-r9rr-8ghm-9j5g.json | 12 +++--------- .../05/GHSA-rc45-m4x9-hxp3/GHSA-rc45-m4x9-hxp3.json | 12 +++--------- .../05/GHSA-rc4f-mfw3-w978/GHSA-rc4f-mfw3-w978.json | 8 ++------ .../05/GHSA-rcvp-7793-9q23/GHSA-rcvp-7793-9q23.json | 8 ++------ .../05/GHSA-rf3x-gg6f-gvmq/GHSA-rf3x-gg6f-gvmq.json | 12 +++--------- .../05/GHSA-rgcc-fhjc-9mj4/GHSA-rgcc-fhjc-9mj4.json | 12 +++--------- .../05/GHSA-rjgm-f3mv-p89p/GHSA-rjgm-f3mv-p89p.json | 4 +--- .../05/GHSA-rjvr-pf2g-7rjx/GHSA-rjvr-pf2g-7rjx.json | 4 +--- .../05/GHSA-rprg-9vqr-w8h6/GHSA-rprg-9vqr-w8h6.json | 12 +++--------- .../05/GHSA-rprw-m5v5-w8g8/GHSA-rprw-m5v5-w8g8.json | 8 ++------ .../05/GHSA-rqfv-p8m4-r85f/GHSA-rqfv-p8m4-r85f.json | 8 ++------ .../05/GHSA-rrx7-4gvc-jr5h/GHSA-rrx7-4gvc-jr5h.json | 8 ++------ .../05/GHSA-rvj9-2hjw-96xg/GHSA-rvj9-2hjw-96xg.json | 12 +++--------- .../05/GHSA-rxph-92gh-ccv4/GHSA-rxph-92gh-ccv4.json | 12 +++--------- .../05/GHSA-rxwh-qg5h-c55m/GHSA-rxwh-qg5h-c55m.json | 8 ++------ .../05/GHSA-v224-987c-gwx2/GHSA-v224-987c-gwx2.json | 8 ++------ .../05/GHSA-v268-p4cf-jcxh/GHSA-v268-p4cf-jcxh.json | 8 ++------ .../05/GHSA-v28p-c79v-3mff/GHSA-v28p-c79v-3mff.json | 8 ++------ .../05/GHSA-v2xv-px5j-7x7v/GHSA-v2xv-px5j-7x7v.json | 12 +++--------- .../05/GHSA-v3jg-64qp-m2qp/GHSA-v3jg-64qp-m2qp.json | 12 +++--------- .../05/GHSA-v446-3mf7-pj7m/GHSA-v446-3mf7-pj7m.json | 12 +++--------- .../05/GHSA-v468-4wmw-389j/GHSA-v468-4wmw-389j.json | 8 ++------ .../05/GHSA-v4hf-h836-p2q4/GHSA-v4hf-h836-p2q4.json | 12 +++--------- .../05/GHSA-v4p8-cpq3-f35v/GHSA-v4p8-cpq3-f35v.json | 8 ++------ .../05/GHSA-v4wq-rpgc-mqx3/GHSA-v4wq-rpgc-mqx3.json | 12 +++--------- .../05/GHSA-v5g5-w9j9-7c3g/GHSA-v5g5-w9j9-7c3g.json | 8 ++------ .../05/GHSA-v648-rmcj-67cw/GHSA-v648-rmcj-67cw.json | 8 ++------ .../05/GHSA-v67h-fvmc-4v2x/GHSA-v67h-fvmc-4v2x.json | 8 ++------ .../05/GHSA-v6mm-33rh-rpfx/GHSA-v6mm-33rh-rpfx.json | 4 +--- .../05/GHSA-v6mq-9h7f-7fwm/GHSA-v6mq-9h7f-7fwm.json | 8 ++------ .../05/GHSA-v6wr-wpj4-wj6v/GHSA-v6wr-wpj4-wj6v.json | 8 ++------ .../05/GHSA-v6xq-qmmw-xf4f/GHSA-v6xq-qmmw-xf4f.json | 8 ++------ .../05/GHSA-v74x-9jqg-qj3p/GHSA-v74x-9jqg-qj3p.json | 8 ++------ .../05/GHSA-v752-6j86-7g43/GHSA-v752-6j86-7g43.json | 4 +--- .../05/GHSA-v784-g8mx-vwg9/GHSA-v784-g8mx-vwg9.json | 8 ++------ .../05/GHSA-v7c5-c5fg-vm5f/GHSA-v7c5-c5fg-vm5f.json | 8 ++------ .../05/GHSA-v7v6-h3r2-4mcv/GHSA-v7v6-h3r2-4mcv.json | 12 +++--------- .../05/GHSA-v96f-fh38-8r85/GHSA-v96f-fh38-8r85.json | 8 ++------ .../05/GHSA-v9jg-rj8p-p68j/GHSA-v9jg-rj8p-p68j.json | 8 ++------ .../05/GHSA-vc8h-r7hv-2mvc/GHSA-vc8h-r7hv-2mvc.json | 8 ++------ .../05/GHSA-vcfv-fw3h-7g9v/GHSA-vcfv-fw3h-7g9v.json | 8 ++------ .../05/GHSA-vchq-8f7w-w3qf/GHSA-vchq-8f7w-w3qf.json | 8 ++------ .../05/GHSA-vf76-6hmj-g67c/GHSA-vf76-6hmj-g67c.json | 12 +++--------- .../05/GHSA-vg87-788x-wc87/GHSA-vg87-788x-wc87.json | 8 ++------ .../05/GHSA-vh44-jfrh-jf4g/GHSA-vh44-jfrh-jf4g.json | 8 ++------ .../05/GHSA-vhfh-622h-c8xf/GHSA-vhfh-622h-c8xf.json | 8 ++------ .../05/GHSA-vhvw-mwr5-fw35/GHSA-vhvw-mwr5-fw35.json | 4 +--- .../05/GHSA-vmfr-6chp-w9mf/GHSA-vmfr-6chp-w9mf.json | 4 +--- .../05/GHSA-vpm4-hxj3-qv62/GHSA-vpm4-hxj3-qv62.json | 12 +++--------- .../05/GHSA-vrfc-3whc-j2hq/GHSA-vrfc-3whc-j2hq.json | 12 +++--------- .../05/GHSA-vw2c-9mrr-2j8q/GHSA-vw2c-9mrr-2j8q.json | 12 +++--------- .../05/GHSA-vw2g-3hc3-gg3f/GHSA-vw2g-3hc3-gg3f.json | 12 +++--------- .../05/GHSA-vw8p-6wj7-vr69/GHSA-vw8p-6wj7-vr69.json | 8 ++------ .../05/GHSA-vx59-6637-4544/GHSA-vx59-6637-4544.json | 8 ++------ .../05/GHSA-w244-c4f9-vj58/GHSA-w244-c4f9-vj58.json | 8 ++------ .../05/GHSA-w2x4-4h9p-mmr4/GHSA-w2x4-4h9p-mmr4.json | 8 ++------ .../05/GHSA-w37m-g9rv-94c3/GHSA-w37m-g9rv-94c3.json | 12 +++--------- .../05/GHSA-w45x-fqpm-jpv8/GHSA-w45x-fqpm-jpv8.json | 8 ++------ .../05/GHSA-w464-9hhf-hv98/GHSA-w464-9hhf-hv98.json | 8 ++------ .../05/GHSA-w5qj-44pr-ppfh/GHSA-w5qj-44pr-ppfh.json | 12 +++--------- .../05/GHSA-w67c-79jh-g7ff/GHSA-w67c-79jh-g7ff.json | 8 ++------ .../05/GHSA-w7w4-rx65-9vww/GHSA-w7w4-rx65-9vww.json | 4 +--- .../05/GHSA-w7wf-x3g8-vjmc/GHSA-w7wf-x3g8-vjmc.json | 12 +++--------- .../05/GHSA-w8wx-pf8f-jrqf/GHSA-w8wx-pf8f-jrqf.json | 8 ++------ .../05/GHSA-w998-w587-cjmc/GHSA-w998-w587-cjmc.json | 8 ++------ .../05/GHSA-w9wr-qppp-mh4c/GHSA-w9wr-qppp-mh4c.json | 8 ++------ .../05/GHSA-wc24-5mpw-3p44/GHSA-wc24-5mpw-3p44.json | 12 +++--------- .../05/GHSA-wc88-2338-pv3r/GHSA-wc88-2338-pv3r.json | 12 +++--------- .../05/GHSA-wcx7-w66c-fc49/GHSA-wcx7-w66c-fc49.json | 8 ++------ .../05/GHSA-wf3j-x3hv-5w6j/GHSA-wf3j-x3hv-5w6j.json | 8 ++------ .../05/GHSA-wf9j-36j5-wf8g/GHSA-wf9j-36j5-wf8g.json | 8 ++------ .../05/GHSA-wfqg-hcp5-rmq8/GHSA-wfqg-hcp5-rmq8.json | 8 ++------ .../05/GHSA-whwm-8f8j-6h6f/GHSA-whwm-8f8j-6h6f.json | 8 ++------ .../05/GHSA-wj35-6r69-v4mr/GHSA-wj35-6r69-v4mr.json | 12 +++--------- .../05/GHSA-wjhw-vfv9-8632/GHSA-wjhw-vfv9-8632.json | 12 +++--------- .../05/GHSA-wm28-h52c-63m4/GHSA-wm28-h52c-63m4.json | 4 +--- .../05/GHSA-wr62-m8v6-8q8c/GHSA-wr62-m8v6-8q8c.json | 8 ++------ .../05/GHSA-wr7h-6372-vgmj/GHSA-wr7h-6372-vgmj.json | 12 +++--------- .../05/GHSA-wrm6-9pmw-hhvh/GHSA-wrm6-9pmw-hhvh.json | 8 ++------ .../05/GHSA-wrw6-82r7-m5c2/GHSA-wrw6-82r7-m5c2.json | 8 ++------ .../05/GHSA-wv6m-cprx-hx6x/GHSA-wv6m-cprx-hx6x.json | 8 ++------ .../05/GHSA-wv95-v394-m64m/GHSA-wv95-v394-m64m.json | 8 ++------ .../05/GHSA-wv9j-qrhg-hr22/GHSA-wv9j-qrhg-hr22.json | 8 ++------ .../05/GHSA-ww36-68ch-v6xq/GHSA-ww36-68ch-v6xq.json | 12 +++--------- .../05/GHSA-x24x-32q2-mhm4/GHSA-x24x-32q2-mhm4.json | 8 ++------ .../05/GHSA-x2x7-q72v-2q6q/GHSA-x2x7-q72v-2q6q.json | 8 ++------ .../05/GHSA-x4f6-m5wj-hxvg/GHSA-x4f6-m5wj-hxvg.json | 8 ++------ .../05/GHSA-x4vw-hwxw-9rqp/GHSA-x4vw-hwxw-9rqp.json | 12 +++--------- .../05/GHSA-x54v-mwpg-8mmr/GHSA-x54v-mwpg-8mmr.json | 8 ++------ .../05/GHSA-x5gq-w47v-78jg/GHSA-x5gq-w47v-78jg.json | 8 ++------ .../05/GHSA-x6mc-vrrp-q4j3/GHSA-x6mc-vrrp-q4j3.json | 8 ++------ .../05/GHSA-x6vm-vfwq-m3w7/GHSA-x6vm-vfwq-m3w7.json | 4 +--- .../05/GHSA-x6wm-3h8r-fcf5/GHSA-x6wm-3h8r-fcf5.json | 4 +--- .../05/GHSA-x769-fvvm-h6jr/GHSA-x769-fvvm-h6jr.json | 8 ++------ .../05/GHSA-x7p7-8c27-hjgq/GHSA-x7p7-8c27-hjgq.json | 8 ++------ .../05/GHSA-x7v9-qqww-p3gc/GHSA-x7v9-qqww-p3gc.json | 12 +++--------- .../05/GHSA-x7xg-4x2p-f655/GHSA-x7xg-4x2p-f655.json | 12 +++--------- .../05/GHSA-x82h-rpg5-96w3/GHSA-x82h-rpg5-96w3.json | 8 ++------ .../05/GHSA-x859-c3r4-93fq/GHSA-x859-c3r4-93fq.json | 8 ++------ .../05/GHSA-xc59-82jg-xjh9/GHSA-xc59-82jg-xjh9.json | 8 ++------ .../05/GHSA-xc7h-mpv6-3v2w/GHSA-xc7h-mpv6-3v2w.json | 8 ++------ .../05/GHSA-xg22-8wp4-xx49/GHSA-xg22-8wp4-xx49.json | 8 ++------ .../05/GHSA-xg58-j2w4-mjfm/GHSA-xg58-j2w4-mjfm.json | 4 +--- .../05/GHSA-xg5p-wxx4-rmwx/GHSA-xg5p-wxx4-rmwx.json | 8 ++------ .../05/GHSA-xg7x-r7p4-phg6/GHSA-xg7x-r7p4-phg6.json | 8 ++------ .../05/GHSA-xh28-g76m-j6rq/GHSA-xh28-g76m-j6rq.json | 8 ++------ .../05/GHSA-xh3f-gcw3-fwjc/GHSA-xh3f-gcw3-fwjc.json | 12 +++--------- .../05/GHSA-xh3j-9hv7-3jxm/GHSA-xh3j-9hv7-3jxm.json | 12 +++--------- .../05/GHSA-xhfg-r9c6-77jg/GHSA-xhfg-r9c6-77jg.json | 8 ++------ .../05/GHSA-xhm7-9r8j-q773/GHSA-xhm7-9r8j-q773.json | 8 ++------ .../05/GHSA-xj72-m52w-529q/GHSA-xj72-m52w-529q.json | 8 ++------ .../05/GHSA-xjr9-phw2-2wjx/GHSA-xjr9-phw2-2wjx.json | 8 ++------ .../05/GHSA-xpcp-c53g-wp4q/GHSA-xpcp-c53g-wp4q.json | 8 ++------ .../05/GHSA-xqgf-mg6r-xcr9/GHSA-xqgf-mg6r-xcr9.json | 8 ++------ .../05/GHSA-xxc7-grf2-q8pr/GHSA-xxc7-grf2-q8pr.json | 8 ++------ .../07/GHSA-wrmg-wv9p-r52j/GHSA-wrmg-wv9p-r52j.json | 4 +--- .../09/GHSA-2f4g-8m4c-65fm/GHSA-2f4g-8m4c-65fm.json | 4 +--- .../09/GHSA-8mrc-7gc2-qv37/GHSA-8mrc-7gc2-qv37.json | 8 ++------ .../09/GHSA-9q2f-7hm7-62h6/GHSA-9q2f-7hm7-62h6.json | 4 +--- .../09/GHSA-c6mf-qfg4-63q6/GHSA-c6mf-qfg4-63q6.json | 4 +--- .../09/GHSA-hff6-mv2f-62rw/GHSA-hff6-mv2f-62rw.json | 4 +--- .../09/GHSA-jj56-g5fp-9mx8/GHSA-jj56-g5fp-9mx8.json | 4 +--- .../09/GHSA-pp72-398c-xq3j/GHSA-pp72-398c-xq3j.json | 4 +--- .../09/GHSA-w3h8-mq7q-q76x/GHSA-w3h8-mq7q-q76x.json | 4 +--- .../09/GHSA-xrrq-jcjx-6cxm/GHSA-xrrq-jcjx-6cxm.json | 4 +--- .../10/GHSA-29j9-ccp8-qccg/GHSA-29j9-ccp8-qccg.json | 4 +--- .../10/GHSA-29qf-rp4c-j9r3/GHSA-29qf-rp4c-j9r3.json | 4 +--- .../10/GHSA-2m57-vvf7-q43j/GHSA-2m57-vvf7-q43j.json | 4 +--- .../10/GHSA-2p5h-g3vp-7934/GHSA-2p5h-g3vp-7934.json | 4 +--- .../10/GHSA-2vcj-c8c3-rrf8/GHSA-2vcj-c8c3-rrf8.json | 4 +--- .../10/GHSA-33vv-xpr4-7w8v/GHSA-33vv-xpr4-7w8v.json | 4 +--- .../10/GHSA-3595-8fw7-qj47/GHSA-3595-8fw7-qj47.json | 4 +--- .../10/GHSA-36hf-56qm-gmg9/GHSA-36hf-56qm-gmg9.json | 4 +--- .../10/GHSA-38vr-r7mr-r99m/GHSA-38vr-r7mr-r99m.json | 4 +--- .../10/GHSA-3q62-89h6-6qhx/GHSA-3q62-89h6-6qhx.json | 4 +--- .../10/GHSA-3vx5-mrc3-jc23/GHSA-3vx5-mrc3-jc23.json | 4 +--- .../10/GHSA-4mx8-g966-23vm/GHSA-4mx8-g966-23vm.json | 4 +--- .../10/GHSA-579p-8xww-r227/GHSA-579p-8xww-r227.json | 8 ++------ .../10/GHSA-62mf-g244-32xg/GHSA-62mf-g244-32xg.json | 4 +--- .../10/GHSA-6jrr-c79c-vj49/GHSA-6jrr-c79c-vj49.json | 4 +--- .../10/GHSA-72r8-2h3j-3pff/GHSA-72r8-2h3j-3pff.json | 4 +--- .../10/GHSA-7rfh-x78j-cqj5/GHSA-7rfh-x78j-cqj5.json | 4 +--- .../10/GHSA-84w9-h3xh-wgv5/GHSA-84w9-h3xh-wgv5.json | 4 +--- .../10/GHSA-86gc-h854-7wv3/GHSA-86gc-h854-7wv3.json | 4 +--- .../10/GHSA-8g63-qvh8-q593/GHSA-8g63-qvh8-q593.json | 4 +--- .../10/GHSA-9gw9-mrm5-m5x9/GHSA-9gw9-mrm5-m5x9.json | 4 +--- .../10/GHSA-9rcm-p38q-cjp2/GHSA-9rcm-p38q-cjp2.json | 4 +--- .../10/GHSA-9w32-9237-jvxc/GHSA-9w32-9237-jvxc.json | 4 +--- .../10/GHSA-9x5r-j6v5-h93r/GHSA-9x5r-j6v5-h93r.json | 4 +--- .../10/GHSA-cfgc-fgg8-p3qf/GHSA-cfgc-fgg8-p3qf.json | 4 +--- .../10/GHSA-f29x-jxpj-xpfj/GHSA-f29x-jxpj-xpfj.json | 4 +--- .../10/GHSA-fjq5-7jcj-c8j4/GHSA-fjq5-7jcj-c8j4.json | 4 +--- .../10/GHSA-fvpw-48xh-gxvm/GHSA-fvpw-48xh-gxvm.json | 4 +--- .../10/GHSA-g5r9-4hpg-33p3/GHSA-g5r9-4hpg-33p3.json | 4 +--- .../10/GHSA-gcrr-4xcm-2wh6/GHSA-gcrr-4xcm-2wh6.json | 4 +--- .../10/GHSA-h3jv-whwm-j8pw/GHSA-h3jv-whwm-j8pw.json | 4 +--- .../10/GHSA-hpgh-grq3-j653/GHSA-hpgh-grq3-j653.json | 4 +--- .../10/GHSA-hx93-gg8r-vm7p/GHSA-hx93-gg8r-vm7p.json | 4 +--- .../10/GHSA-hxg7-68hm-96pc/GHSA-hxg7-68hm-96pc.json | 4 +--- .../10/GHSA-j4jh-vhq4-rghj/GHSA-j4jh-vhq4-rghj.json | 4 +--- .../10/GHSA-j5jp-wrf9-62rx/GHSA-j5jp-wrf9-62rx.json | 4 +--- .../10/GHSA-j9fh-qx7v-pp25/GHSA-j9fh-qx7v-pp25.json | 4 +--- .../10/GHSA-m95q-f33m-cqcq/GHSA-m95q-f33m-cqcq.json | 4 +--- .../10/GHSA-mppc-g8x5-rq8c/GHSA-mppc-g8x5-rq8c.json | 4 +--- .../10/GHSA-mx4x-66hf-6cqr/GHSA-mx4x-66hf-6cqr.json | 4 +--- .../10/GHSA-p75m-5rhq-4xg7/GHSA-p75m-5rhq-4xg7.json | 4 +--- .../10/GHSA-pf44-6c4p-6mp7/GHSA-pf44-6c4p-6mp7.json | 4 +--- .../10/GHSA-pfpr-x72v-6vh3/GHSA-pfpr-x72v-6vh3.json | 4 +--- .../10/GHSA-q28w-jq68-2wfw/GHSA-q28w-jq68-2wfw.json | 4 +--- .../10/GHSA-q7v9-j7wp-p986/GHSA-q7v9-j7wp-p986.json | 4 +--- .../10/GHSA-qg76-cc76-5jpx/GHSA-qg76-cc76-5jpx.json | 4 +--- .../10/GHSA-qmfr-mf7x-c682/GHSA-qmfr-mf7x-c682.json | 4 +--- .../10/GHSA-r757-rrmf-xpw5/GHSA-r757-rrmf-xpw5.json | 4 +--- .../10/GHSA-r9r4-j5ch-84qf/GHSA-r9r4-j5ch-84qf.json | 4 +--- .../10/GHSA-rr7v-pv6m-q45p/GHSA-rr7v-pv6m-q45p.json | 4 +--- .../10/GHSA-v2c5-cx8p-42xh/GHSA-v2c5-cx8p-42xh.json | 4 +--- .../10/GHSA-v9xr-q86f-4pqc/GHSA-v9xr-q86f-4pqc.json | 4 +--- .../10/GHSA-vh4p-xvjw-q6rc/GHSA-vh4p-xvjw-q6rc.json | 4 +--- .../10/GHSA-vr7h-8xxw-xfw6/GHSA-vr7h-8xxw-xfw6.json | 4 +--- .../10/GHSA-wvgj-4785-cm7h/GHSA-wvgj-4785-cm7h.json | 4 +--- .../10/GHSA-x3m2-f92m-6q4j/GHSA-x3m2-f92m-6q4j.json | 4 +--- .../10/GHSA-x7vh-xrjf-vx38/GHSA-x7vh-xrjf-vx38.json | 4 +--- .../10/GHSA-x7wv-26j6-pwgf/GHSA-x7wv-26j6-pwgf.json | 4 +--- .../10/GHSA-xmj6-5q7j-j6gg/GHSA-xmj6-5q7j-j6gg.json | 4 +--- .../10/GHSA-xxmh-c24j-hmf3/GHSA-xxmh-c24j-hmf3.json | 4 +--- .../01/GHSA-j3w3-rrqq-mpx3/GHSA-j3w3-rrqq-mpx3.json | 8 ++------ .../02/GHSA-jj62-89qr-fh5c/GHSA-jj62-89qr-fh5c.json | 4 +--- .../03/GHSA-75w5-3mgf-2p9g/GHSA-75w5-3mgf-2p9g.json | 4 +--- .../03/GHSA-7f4r-97fv-4hvj/GHSA-7f4r-97fv-4hvj.json | 4 +--- .../03/GHSA-ccxq-4rr7-hcmq/GHSA-ccxq-4rr7-hcmq.json | 4 +--- .../03/GHSA-mwp9-5jmp-6hmf/GHSA-mwp9-5jmp-6hmf.json | 4 +--- .../08/GHSA-65fx-pmw6-rcfm/GHSA-65fx-pmw6-rcfm.json | 4 +--- .../08/GHSA-gg3j-5crr-vx4f/GHSA-gg3j-5crr-vx4f.json | 4 +--- .../08/GHSA-m7gm-r64q-4p66/GHSA-m7gm-r64q-4p66.json | 4 +--- .../09/GHSA-4w9x-x528-24m9/GHSA-4w9x-x528-24m9.json | 4 +--- .../09/GHSA-pg85-j65f-45p4/GHSA-pg85-j65f-45p4.json | 4 +--- .../02/GHSA-9hq5-xh26-hcx9/GHSA-9hq5-xh26-hcx9.json | 4 +--- .../04/GHSA-23r4-x5xc-qw4f/GHSA-23r4-x5xc-qw4f.json | 12 +++--------- .../04/GHSA-27p7-7mgq-m3v8/GHSA-27p7-7mgq-m3v8.json | 4 +--- .../04/GHSA-27w6-8m77-x3qf/GHSA-27w6-8m77-x3qf.json | 4 +--- .../04/GHSA-2xw4-7mq9-jfcm/GHSA-2xw4-7mq9-jfcm.json | 4 +--- .../04/GHSA-35hx-x7f3-cr36/GHSA-35hx-x7f3-cr36.json | 4 +--- .../04/GHSA-368r-9597-529x/GHSA-368r-9597-529x.json | 4 +--- .../04/GHSA-3j63-c5m3-j7wp/GHSA-3j63-c5m3-j7wp.json | 4 +--- .../04/GHSA-3jvg-6v8m-chpp/GHSA-3jvg-6v8m-chpp.json | 4 +--- .../04/GHSA-3pfm-489g-56g9/GHSA-3pfm-489g-56g9.json | 8 ++------ .../04/GHSA-3qj4-9cvg-gv2q/GHSA-3qj4-9cvg-gv2q.json | 4 +--- .../04/GHSA-4mv6-pc6v-wf68/GHSA-4mv6-pc6v-wf68.json | 4 +--- .../04/GHSA-4p8q-p8qc-486x/GHSA-4p8q-p8qc-486x.json | 4 +--- .../04/GHSA-4q6x-q9wv-7pxv/GHSA-4q6x-q9wv-7pxv.json | 4 +--- .../04/GHSA-4xx7-g4qj-7pxm/GHSA-4xx7-g4qj-7pxm.json | 4 +--- .../04/GHSA-52w9-whm3-f76c/GHSA-52w9-whm3-f76c.json | 4 +--- .../04/GHSA-55c4-h3q7-f6wp/GHSA-55c4-h3q7-f6wp.json | 4 +--- .../04/GHSA-59vf-hjxc-f9c5/GHSA-59vf-hjxc-f9c5.json | 4 +--- .../04/GHSA-68qv-4jc5-hr7h/GHSA-68qv-4jc5-hr7h.json | 4 +--- .../04/GHSA-68ww-8rpc-355h/GHSA-68ww-8rpc-355h.json | 8 ++------ .../04/GHSA-78gp-j22r-4mpj/GHSA-78gp-j22r-4mpj.json | 8 ++------ .../04/GHSA-7qgp-gf9r-8w4w/GHSA-7qgp-gf9r-8w4w.json | 4 +--- .../04/GHSA-7v8g-rfp5-x3hm/GHSA-7v8g-rfp5-x3hm.json | 4 +--- .../04/GHSA-8cc2-fr9v-6c2x/GHSA-8cc2-fr9v-6c2x.json | 4 +--- .../04/GHSA-8h65-qg72-4ffh/GHSA-8h65-qg72-4ffh.json | 8 ++------ .../04/GHSA-8wv4-58g4-2v58/GHSA-8wv4-58g4-2v58.json | 4 +--- .../04/GHSA-8x2m-vwxp-r65j/GHSA-8x2m-vwxp-r65j.json | 4 +--- .../04/GHSA-9j6h-484m-x3f5/GHSA-9j6h-484m-x3f5.json | 4 +--- .../04/GHSA-9jc6-4356-gcv5/GHSA-9jc6-4356-gcv5.json | 8 ++------ .../04/GHSA-9q4r-mjjh-mj2c/GHSA-9q4r-mjjh-mj2c.json | 4 +--- .../04/GHSA-c8c4-3mwr-7x6g/GHSA-c8c4-3mwr-7x6g.json | 4 +--- .../04/GHSA-cffw-pr5g-439r/GHSA-cffw-pr5g-439r.json | 4 +--- .../04/GHSA-chwx-r397-6ww4/GHSA-chwx-r397-6ww4.json | 4 +--- .../04/GHSA-cjj3-f3rf-jf7w/GHSA-cjj3-f3rf-jf7w.json | 4 +--- .../04/GHSA-cqgx-qm2w-88qc/GHSA-cqgx-qm2w-88qc.json | 4 +--- .../04/GHSA-cqvp-qf4w-3mpx/GHSA-cqvp-qf4w-3mpx.json | 4 +--- .../04/GHSA-crgc-qfch-jgr7/GHSA-crgc-qfch-jgr7.json | 4 +--- .../04/GHSA-f525-qqcm-4ww9/GHSA-f525-qqcm-4ww9.json | 4 +--- .../04/GHSA-f7cx-hq8m-95w6/GHSA-f7cx-hq8m-95w6.json | 4 +--- .../04/GHSA-f8c8-rxc7-wvjc/GHSA-f8c8-rxc7-wvjc.json | 4 +--- .../04/GHSA-fg6v-9r8w-4p8h/GHSA-fg6v-9r8w-4p8h.json | 4 +--- .../04/GHSA-gfgm-4g66-q77w/GHSA-gfgm-4g66-q77w.json | 8 ++------ .../04/GHSA-gv6g-p8pg-jx2h/GHSA-gv6g-p8pg-jx2h.json | 4 +--- .../04/GHSA-gw7j-rv4v-wrcj/GHSA-gw7j-rv4v-wrcj.json | 4 +--- .../04/GHSA-h95w-mc8p-wm53/GHSA-h95w-mc8p-wm53.json | 4 +--- .../04/GHSA-h9h2-jmvv-fr8c/GHSA-h9h2-jmvv-fr8c.json | 4 +--- .../04/GHSA-h9w4-3hv9-j8r3/GHSA-h9w4-3hv9-j8r3.json | 4 +--- .../04/GHSA-hcfm-v43m-qw33/GHSA-hcfm-v43m-qw33.json | 4 +--- .../04/GHSA-hcgv-gpgg-9mmm/GHSA-hcgv-gpgg-9mmm.json | 4 +--- .../04/GHSA-hh28-wc7c-m2r4/GHSA-hh28-wc7c-m2r4.json | 4 +--- .../04/GHSA-hp3w-grg4-233f/GHSA-hp3w-grg4-233f.json | 4 +--- .../04/GHSA-hwc4-2rmw-hcvq/GHSA-hwc4-2rmw-hcvq.json | 4 +--- .../04/GHSA-jmw2-399f-6mwg/GHSA-jmw2-399f-6mwg.json | 4 +--- .../04/GHSA-mqq7-33jf-2x53/GHSA-mqq7-33jf-2x53.json | 4 +--- .../04/GHSA-mw9v-x4m4-66v4/GHSA-mw9v-x4m4-66v4.json | 4 +--- .../04/GHSA-mwrm-5xj9-hg36/GHSA-mwrm-5xj9-hg36.json | 4 +--- .../04/GHSA-p2cg-w533-rqh5/GHSA-p2cg-w533-rqh5.json | 4 +--- .../04/GHSA-p52c-jr7p-8c89/GHSA-p52c-jr7p-8c89.json | 4 +--- .../04/GHSA-pj43-gpqr-fhm8/GHSA-pj43-gpqr-fhm8.json | 4 +--- .../04/GHSA-pm8c-xqrr-62h2/GHSA-pm8c-xqrr-62h2.json | 4 +--- .../04/GHSA-q8mj-9x2v-j7w5/GHSA-q8mj-9x2v-j7w5.json | 4 +--- .../04/GHSA-qcrm-33g9-cjcc/GHSA-qcrm-33g9-cjcc.json | 4 +--- .../04/GHSA-qxqw-792j-v657/GHSA-qxqw-792j-v657.json | 4 +--- .../04/GHSA-r5c7-85f6-wq78/GHSA-r5c7-85f6-wq78.json | 4 +--- .../04/GHSA-rc3h-x674-fmwq/GHSA-rc3h-x674-fmwq.json | 4 +--- .../04/GHSA-rqcq-2f32-4q3g/GHSA-rqcq-2f32-4q3g.json | 4 +--- .../04/GHSA-rrpg-fwx7-jf88/GHSA-rrpg-fwx7-jf88.json | 4 +--- .../04/GHSA-rx2w-fqqj-rp5m/GHSA-rx2w-fqqj-rp5m.json | 4 +--- .../04/GHSA-v74g-7hwm-jpjc/GHSA-v74g-7hwm-jpjc.json | 12 +++--------- .../04/GHSA-vgxh-95xm-c2p8/GHSA-vgxh-95xm-c2p8.json | 4 +--- .../04/GHSA-w6xp-gc2w-28hx/GHSA-w6xp-gc2w-28hx.json | 4 +--- .../04/GHSA-wg24-v48r-f3mm/GHSA-wg24-v48r-f3mm.json | 4 +--- .../04/GHSA-wgqj-wx2p-22jm/GHSA-wgqj-wx2p-22jm.json | 4 +--- .../04/GHSA-wh4m-6rh3-p4rq/GHSA-wh4m-6rh3-p4rq.json | 4 +--- .../04/GHSA-wh9j-8hrm-2g7r/GHSA-wh9j-8hrm-2g7r.json | 4 +--- .../04/GHSA-wmmf-r63x-5jrw/GHSA-wmmf-r63x-5jrw.json | 4 +--- .../04/GHSA-wvjp-4x3w-pvqx/GHSA-wvjp-4x3w-pvqx.json | 4 +--- .../04/GHSA-wx55-ppw9-52p9/GHSA-wx55-ppw9-52p9.json | 4 +--- .../04/GHSA-x498-p429-582w/GHSA-x498-p429-582w.json | 4 +--- .../04/GHSA-x6h6-66j7-3gwr/GHSA-x6h6-66j7-3gwr.json | 4 +--- .../04/GHSA-x6pg-hxcx-rghj/GHSA-x6pg-hxcx-rghj.json | 4 +--- .../04/GHSA-x8m7-f4f6-46c2/GHSA-x8m7-f4f6-46c2.json | 4 +--- .../04/GHSA-xr98-c22v-cfcg/GHSA-xr98-c22v-cfcg.json | 12 +++--------- .../07/GHSA-9p47-x6rm-qgxw/GHSA-9p47-x6rm-qgxw.json | 4 +--- .../07/GHSA-mjh6-hm62-6x3r/GHSA-mjh6-hm62-6x3r.json | 8 ++------ .../08/GHSA-q677-7pjp-5hq5/GHSA-q677-7pjp-5hq5.json | 4 +--- .../11/GHSA-3pg4-7fgq-vhrc/GHSA-3pg4-7fgq-vhrc.json | 4 +--- .../11/GHSA-477m-cwgq-8xc9/GHSA-477m-cwgq-8xc9.json | 4 +--- .../11/GHSA-492j-gvpg-m7v2/GHSA-492j-gvpg-m7v2.json | 4 +--- .../11/GHSA-4gq7-5m56-j2gf/GHSA-4gq7-5m56-j2gf.json | 4 +--- .../11/GHSA-4h3w-cwc4-8rm4/GHSA-4h3w-cwc4-8rm4.json | 4 +--- .../11/GHSA-55hf-5xf4-r73q/GHSA-55hf-5xf4-r73q.json | 4 +--- .../11/GHSA-5pj7-9h42-mfx3/GHSA-5pj7-9h42-mfx3.json | 4 +--- .../11/GHSA-5qfw-5mjg-84fm/GHSA-5qfw-5mjg-84fm.json | 4 +--- .../11/GHSA-67c8-xphv-qf8f/GHSA-67c8-xphv-qf8f.json | 4 +--- .../11/GHSA-6c9g-ghq5-c4c8/GHSA-6c9g-ghq5-c4c8.json | 4 +--- .../11/GHSA-6ch2-rhpm-47qm/GHSA-6ch2-rhpm-47qm.json | 4 +--- .../11/GHSA-88hm-mv53-m5h7/GHSA-88hm-mv53-m5h7.json | 4 +--- .../11/GHSA-8x5h-hfqw-552w/GHSA-8x5h-hfqw-552w.json | 4 +--- .../11/GHSA-9qq6-2qhr-4mv7/GHSA-9qq6-2qhr-4mv7.json | 12 +++--------- .../11/GHSA-c77f-7g8q-gr2v/GHSA-c77f-7g8q-gr2v.json | 4 +--- .../11/GHSA-c7xq-233c-6w92/GHSA-c7xq-233c-6w92.json | 4 +--- .../11/GHSA-c8g9-45jp-mg7h/GHSA-c8g9-45jp-mg7h.json | 4 +--- .../11/GHSA-cj5q-856p-33fg/GHSA-cj5q-856p-33fg.json | 4 +--- .../11/GHSA-fgfv-4h4q-wrvx/GHSA-fgfv-4h4q-wrvx.json | 4 +--- .../11/GHSA-g2w3-6c6j-74qw/GHSA-g2w3-6c6j-74qw.json | 4 +--- .../11/GHSA-gf2c-phc6-4g3w/GHSA-gf2c-phc6-4g3w.json | 4 +--- .../11/GHSA-gh49-pqq6-x974/GHSA-gh49-pqq6-x974.json | 4 +--- .../11/GHSA-gq97-p6gc-crcw/GHSA-gq97-p6gc-crcw.json | 4 +--- .../11/GHSA-hjg8-47g6-8f8p/GHSA-hjg8-47g6-8f8p.json | 4 +--- .../11/GHSA-j5gv-q5p3-x979/GHSA-j5gv-q5p3-x979.json | 4 +--- .../11/GHSA-j6q3-cq66-wv24/GHSA-j6q3-cq66-wv24.json | 4 +--- .../11/GHSA-j8pr-x7hr-ggp9/GHSA-j8pr-x7hr-ggp9.json | 4 +--- .../11/GHSA-jph9-x673-x349/GHSA-jph9-x673-x349.json | 4 +--- .../11/GHSA-m7q4-j5c4-6pjq/GHSA-m7q4-j5c4-6pjq.json | 4 +--- .../11/GHSA-pm76-x9fx-5pr6/GHSA-pm76-x9fx-5pr6.json | 4 +--- .../11/GHSA-q998-8jff-x3rg/GHSA-q998-8jff-x3rg.json | 4 +--- .../11/GHSA-rmv6-pcxx-vfgj/GHSA-rmv6-pcxx-vfgj.json | 8 ++------ .../11/GHSA-rrg5-rjgq-p223/GHSA-rrg5-rjgq-p223.json | 4 +--- .../11/GHSA-rw99-6hrh-fmjr/GHSA-rw99-6hrh-fmjr.json | 4 +--- .../11/GHSA-v4pq-9h29-fmjc/GHSA-v4pq-9h29-fmjc.json | 4 +--- .../11/GHSA-v5h2-p3p4-wc8q/GHSA-v5h2-p3p4-wc8q.json | 4 +--- .../11/GHSA-v6fc-jm83-8p5x/GHSA-v6fc-jm83-8p5x.json | 4 +--- .../11/GHSA-vj2h-cxvj-32h5/GHSA-vj2h-cxvj-32h5.json | 4 +--- .../11/GHSA-vj7j-963g-ch8c/GHSA-vj7j-963g-ch8c.json | 4 +--- .../11/GHSA-vv5r-m8gv-g9mg/GHSA-vv5r-m8gv-g9mg.json | 4 +--- .../11/GHSA-wr9r-499g-57gv/GHSA-wr9r-499g-57gv.json | 4 +--- .../11/GHSA-x8wx-cq89-52xv/GHSA-x8wx-cq89-52xv.json | 4 +--- .../11/GHSA-xc9p-wwrx-qmmv/GHSA-xc9p-wwrx-qmmv.json | 4 +--- 894 files changed, 1636 insertions(+), 4908 deletions(-) diff --git a/advisories/github-reviewed/2020/07/GHSA-7xcx-6wjh-7xp2/GHSA-7xcx-6wjh-7xp2.json b/advisories/github-reviewed/2020/07/GHSA-7xcx-6wjh-7xp2/GHSA-7xcx-6wjh-7xp2.json index aecb9e53901..b12d3cea0a6 100644 --- a/advisories/github-reviewed/2020/07/GHSA-7xcx-6wjh-7xp2/GHSA-7xcx-6wjh-7xp2.json +++ b/advisories/github-reviewed/2020/07/GHSA-7xcx-6wjh-7xp2/GHSA-7xcx-6wjh-7xp2.json @@ -3,14 +3,10 @@ "id": "GHSA-7xcx-6wjh-7xp2", "modified": "2021-09-22T21:03:04Z", "published": "2020-07-13T21:34:59Z", - "aliases": [ - - ], + "aliases": [], "summary": "Command Injection in standard-version", "details": "# GitHub Security Lab (GHSL) Vulnerability Report: `GHSL-2020-111`\n\nThe [GitHub Security Lab](https://securitylab.github.com) team has identified a potential security vulnerability in [standard-version](https://github.com/conventional-changelog/standard-version).\n\n## Summary\n\nThe `standardVersion` function has a command injection vulnerability. Clients of the `standard-version` library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability.\n\n## Product\nStandard Version\n \n## Tested Version\nCommit [2f04ac8](https://github.com/conventional-changelog/standard-version/tree/2f04ac8fc1c134a1981c23a093d4eece77d0bbb9/)\n\n## Details\n\n### Issue 1: Command injection in `standardVersion`\n\nThe following proof-of-concept illustrates the vulnerability. First install Standard Version and create an empty git repo to run the PoC in:\n\n```\nnpm install standard-version\ngit init\necho \"foo\" > foo.txt # the git repo has to be non-empty\ngit add foo.txt\ngit commit -am \"initial commit\"\n```\n\nNow create a file with the following contents:\n\n```\nvar fs = require(\"fs\");\n// setting up a bit of environment\nfs.writeFileSync(\"package.json\", '{\"name\": \"foo\", \"version\": \"1.0.0\"}');\n\nconst standardVersion = require('standard-version')\n\nstandardVersion({\n noVerify: true,\n infile: 'foo.txt',\n releaseCommitMessageFormat: \"bla `touch exploit`\"\n})\n```\n\nand run it:\n\n```\nnode test.js\n```\n\nNotice that a file named `exploit` has been created.\n\nThis vulnerability is similar to command injection vulnerabilities that have been found in other Javascript libraries. Here are some examples:\n[CVE-2020-7646](https://github.com/advisories/GHSA-m8xj-5v73-3hh8),\n[CVE-2020-7614](https://github.com/advisories/GHSA-426h-24vj-qwxf),\n[CVE-2020-7597](https://github.com/advisories/GHSA-5q88-cjfq-g2mh),\n[CVE-2019-10778](https://github.com/advisories/GHSA-4gp3-p7ph-x2jr),\n[CVE-2019-10776](https://github.com/advisories/GHSA-84cm-v6jp-gjmr),\n[CVE-2018-16462](https://github.com/advisories/GHSA-9jm3-5835-537m),\n[CVE-2018-16461](https://github.com/advisories/GHSA-7g2w-6r25-2j7p),\n[CVE-2018-16460](https://github.com/advisories/GHSA-cfhg-9x44-78h2),\n[CVE-2018-13797](https://github.com/advisories/GHSA-pp57-mqmh-44h7),\n[CVE-2018-3786](https://github.com/advisories/GHSA-c9j3-wqph-5xx9),\n[CVE-2018-3772](https://github.com/advisories/GHSA-wjr4-2jgw-hmv8),\n[CVE-2018-3746](https://github.com/advisories/GHSA-3pxp-6963-46r9),\n[CVE-2017-16100](https://github.com/advisories/GHSA-jcw8-r9xm-32c6),\n[CVE-2017-16042](https://github.com/advisories/GHSA-qh2h-chj9-jffq).\n\nWe have written a [CodeQL](https://codeql.com) query, which automatically detects this vulnerability. You can see the results of the query on the `standard-version` project [here](https://lgtm.com/query/237522640229151035/).\n\n#### Impact\n\nThis issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.\n\n#### Remediation\n\nWe recommend not using an API that can interpret a string as a shell command. For example, use [`child_process.execFile`](https://nodejs.org/api/child_process.html#child_process_child_process_execfile_file_args_options_callback) instead of [`child_process.exec`](https://nodejs.org/api/child_process.html#child_process_child_process_exec_command_options_callback).\n\n## Credit\n\nThis issue was discovered and reported by GitHub Engineer [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh).\n\n## Contact\n\nYou can contact the GHSL team at `securitylab@github.com`, please include `GHSL-2020-111` in any communication regarding this issue.\n\n## Disclosure Policy\n\nThis report is subject to our [coordinated disclosure policy](https://securitylab.github.com/disclosures#policy).", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2020/07/GHSA-gm9x-q798-hmr4/GHSA-gm9x-q798-hmr4.json b/advisories/github-reviewed/2020/07/GHSA-gm9x-q798-hmr4/GHSA-gm9x-q798-hmr4.json index 803442d3c99..04605a0d915 100644 --- a/advisories/github-reviewed/2020/07/GHSA-gm9x-q798-hmr4/GHSA-gm9x-q798-hmr4.json +++ b/advisories/github-reviewed/2020/07/GHSA-gm9x-q798-hmr4/GHSA-gm9x-q798-hmr4.json @@ -3,9 +3,7 @@ "id": "GHSA-gm9x-q798-hmr4", "modified": "2021-09-23T17:26:33Z", "published": "2020-07-29T14:53:40Z", - "aliases": [ - - ], + "aliases": [], "summary": "Command Injection in git-tags-remote", "details": "All versions of `git-tags-remote ` are vulnerable to Command Injection. The package fails to sanitize the repository input and passes it directly to an `exec` call on the `get` function . This may allow attackers to execute arbitrary code in the system if the `repo` value passed to the function is user-controlled. \n\nThe following proof-of-concept creates a file in `/tmp`: \n```\nconst gitTagsRemote = require('git-tags-remote');\n\ngitTagsRemote.get('https://github.com/sh0ji/git-tags-remote.git; echo \"Injection Success\" > /tmp/command-injection.test')\n.then(tags => console.log(tags));\n```", "severity": [ diff --git a/advisories/github-reviewed/2020/07/GHSA-jmqm-f2gx-4fjv/GHSA-jmqm-f2gx-4fjv.json b/advisories/github-reviewed/2020/07/GHSA-jmqm-f2gx-4fjv/GHSA-jmqm-f2gx-4fjv.json index b9589dad4a2..f645b59d4e9 100644 --- a/advisories/github-reviewed/2020/07/GHSA-jmqm-f2gx-4fjv/GHSA-jmqm-f2gx-4fjv.json +++ b/advisories/github-reviewed/2020/07/GHSA-jmqm-f2gx-4fjv/GHSA-jmqm-f2gx-4fjv.json @@ -3,9 +3,7 @@ "id": "GHSA-jmqm-f2gx-4fjv", "modified": "2021-09-22T19:00:07Z", "published": "2020-07-07T18:59:10Z", - "aliases": [ - - ], + "aliases": [], "summary": "Sensitive information exposure through logs in npm-registry-fetch", "details": "Affected versions of `npm-registry-fetch` are vulnerable to an information exposure vulnerability through log files. The cli supports URLs like `://[[:]@][:][:][/]`. The password value is not redacted and is printed to stdout and also to any generated log files.", "severity": [ diff --git a/advisories/github-reviewed/2020/07/GHSA-mm44-wc5p-wqhq/GHSA-mm44-wc5p-wqhq.json b/advisories/github-reviewed/2020/07/GHSA-mm44-wc5p-wqhq/GHSA-mm44-wc5p-wqhq.json index d2246bad4a2..292a9344e2c 100644 --- a/advisories/github-reviewed/2020/07/GHSA-mm44-wc5p-wqhq/GHSA-mm44-wc5p-wqhq.json +++ b/advisories/github-reviewed/2020/07/GHSA-mm44-wc5p-wqhq/GHSA-mm44-wc5p-wqhq.json @@ -3,14 +3,10 @@ "id": "GHSA-mm44-wc5p-wqhq", "modified": "2022-01-18T23:05:18Z", "published": "2020-07-07T16:45:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "Denial of service due to reference expansion in versions earlier than 4.0", "details": "### Impact\n\nThe CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those references are deeply nested and used multiple times (so that the same reference to the same object occurs multiple times), and if the decoded CBOR object is sent to a serialization method such as EncodeToBytes, ToString, or ToJSONString, since the objects referred to are expanded in the process and take up orders of magnitude more memory than if the references weren't resolved.\n\nThe impact of this problem on any particular system varies. In general, the risk is higher if the system allows users to send arbitrary CBOR objects without authentication, or exposes a remote endpoint in which arbitrary CBOR objects can be sent without authentication.\n\n### Patches\n\nThis problem is addressed in version 4.0 by disabling reference resolution by default. Users should use the latest version of this library.\n\n### Workarounds\n\nSince version 3.6, an encoding option (`resolvereferences=true` or `resolvereferences=false`) in CBOREncodeOptions sets whether the CBOR processor will resolve these kinds of references when decoding a CBOR object. Set `resolvereferences=false` to disable reference resolution.\n\nIn version 3.6, if the method used CBORObject.Read() or CBORObject.DecodeFromBytes() to decode a serialized CBOR object, call the overload that takes CBOREncodeOptions as follows:\n\n CBORObject.DecodeFromBytes(bytes, new CBOREncodeOptions(\"resolvereferences=false\"));\n\nIn versions 3.5 and earlier, this issue is present only if the CBOR object is an array or a map. If the application does not expect a decoded CBOR object to be an array or a map, it should check the CBOR object's type before encoding that object, as follows:\n\n if (cbor.Type != CBORType.Array && cbor.Type != CBORType.Map) {\n cbor.EncodeToBytes();\n }\n\nAlternatively, for such versions, the application can use WriteTo to decode the CBOR object to a so-called \"limited memory stream\", that is, a Stream that throws an exception if too many bytes would be written. How to write such a limited-memory stream is nontrivial and beyond the scope of this advisory.\n\n LimitedMemoryStream stream = new LimitedMemoryStream(100000); // Limit to 100000 bytes\n cbor.WriteTo(stream);\n return stream.ToBytes();\n\nTo check whether a byte array representing a CBOR object might exhibit this problem, check whether the array contains the byte 0xd8 followed immediately by either 0x19 or 0x1d. This check catches all affected CBOR objects but may catch some non-affected CBOR objects (notably integers and byte strings).\n\n### References\n\nSee the Wikipedia article [Billion laughs attack](https://en.wikipedia.org/wiki/Billion_laughs_attack) and the related issue in [Kubernetes](https://github.com/kubernetes/kubernetes/issues/83253).\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [the CBOR repository](https://github.com/peteroupc/cbor-java).\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -43,9 +39,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-07-07T16:45:07Z", diff --git a/advisories/github-reviewed/2020/07/GHSA-wvh7-5p38-2qfc/GHSA-wvh7-5p38-2qfc.json b/advisories/github-reviewed/2020/07/GHSA-wvh7-5p38-2qfc/GHSA-wvh7-5p38-2qfc.json index ba79726b887..7931ff33d97 100644 --- a/advisories/github-reviewed/2020/07/GHSA-wvh7-5p38-2qfc/GHSA-wvh7-5p38-2qfc.json +++ b/advisories/github-reviewed/2020/07/GHSA-wvh7-5p38-2qfc/GHSA-wvh7-5p38-2qfc.json @@ -3,14 +3,10 @@ "id": "GHSA-wvh7-5p38-2qfc", "modified": "2021-09-22T21:05:43Z", "published": "2020-07-23T18:20:10Z", - "aliases": [ - - ], + "aliases": [], "summary": "Storing Password in Local Storage", "details": "The `setPassword` method (http://parseplatform.org/Parse-SDK-JS/api/2.9.1/Parse.User.html#setPassword) stores the user's password in localStorage as raw text making it vulnerable to anyone with access to your localStorage. We believe this is the only time that password is stored at all. In the documentation under Users > Signing Up, it clearly states, \"We never store passwords in plaintext, nor will we ever transmit passwords back to the client in plaintext.\"\n\nExample Code:\n```js\nasync () => {\n const user = Parse.User.current()\n if (user) {\n user.setPassword('newpass')\n await user.save()\n }\n}\n```\nAfter running the above code, the new password will be stored in localStorage as a property named \"password\".\n\nProposed Solution:\nBefore saving anything to localStorage, Parse should strip out any properties named \"password\" that are attempting to be stored with a Parse.User type object.\n\nConfiguration:\nParse SDK: 2.9.1\nParse Server: 3.9.0", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2020/08/GHSA-3fw8-66wf-pr7m/GHSA-3fw8-66wf-pr7m.json b/advisories/github-reviewed/2020/08/GHSA-3fw8-66wf-pr7m/GHSA-3fw8-66wf-pr7m.json index 3a1c5cd8d7e..ae7b1b42d41 100644 --- a/advisories/github-reviewed/2020/08/GHSA-3fw8-66wf-pr7m/GHSA-3fw8-66wf-pr7m.json +++ b/advisories/github-reviewed/2020/08/GHSA-3fw8-66wf-pr7m/GHSA-3fw8-66wf-pr7m.json @@ -8,9 +8,7 @@ ], "summary": "methodOverride Middleware Reflected Cross-Site Scripting in connect", "details": "Connect is a stack of middleware that is executed in order in each request.\n\nThe \"methodOverride\" middleware allows the http post to override the method of the request with the value of the \"_method\" post key or with the header \"x-http-method-override\".\n\nBecause the user post input was not checked, req.method could contain any kind of value. Because the req.method did not match any common method VERB, connect answered with a 404 page containing the \"Cannot `[method]` `[url]`\" content. The method was not properly encoded for output in the browser.\n\n\n###Example:\n```\n~ curl \"localhost:3000\" -d \"_method=\"\nCannot /\n```\n\n## Recommendation\n\nUpdate to the newest version of Connect or disable methodOverride. It is not possible to avoid the vulnerability if you have enabled this middleware in the top of your stack.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2020/08/GHSA-5cp4-xmrw-59wf/GHSA-5cp4-xmrw-59wf.json b/advisories/github-reviewed/2020/08/GHSA-5cp4-xmrw-59wf/GHSA-5cp4-xmrw-59wf.json index efe92a9681b..3d68a973b41 100644 --- a/advisories/github-reviewed/2020/08/GHSA-5cp4-xmrw-59wf/GHSA-5cp4-xmrw-59wf.json +++ b/advisories/github-reviewed/2020/08/GHSA-5cp4-xmrw-59wf/GHSA-5cp4-xmrw-59wf.json @@ -3,9 +3,7 @@ "id": "GHSA-5cp4-xmrw-59wf", "modified": "2021-10-08T21:25:58Z", "published": "2020-08-05T21:47:02Z", - "aliases": [ - - ], + "aliases": [], "summary": "XSS via JQLite DOM manipulation functions in AngularJS", "details": "### Summary\nXSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to `JQLite` methods like `JQLite.prepend`, `JQLite.after`, `JQLite.append`, `JQLite.replaceWith`, `JQLite.append`, `new JQLite` and `angular.element`.\n\n### Description\n\nJQLite (DOM manipulation library that's part of AngularJS) manipulates input HTML before inserting it to the DOM in `jqLiteBuildFragment`.\n\nOne of the modifications performed [expands an XHTML self-closing tag](https://github.com/angular/angular.js/blob/418355f1cf9a9a9827ae81d257966e6acfb5623a/src/jqLite.js#L218).\n\nIf `jqLiteBuildFragment` is called (e.g. via `new JQLite(aString)`) with user-controlled HTML string that was sanitized (e.g. with [DOMPurify](https://github.com/cure53/DOMPurify)), the transformation done by JQLite may modify some forms of an inert, sanitized payload into a payload containing JavaScript - and trigger an XSS when the payload is inserted into DOM.\n\nThis is similar to a bug in jQuery `htmlPrefilter` function that was [fixed in 3.5.0](https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/).\n\n### Proof of concept\n\n```javascript\nconst inertPayload = `
` before adding it to the DOM, closing the style element early and reactivating `img`.\n\n### Patches\nThe issue is patched in `JQLite` bundled with angular 1.8.0. AngularJS users using JQuery should upgrade JQuery to 3.5.0, as a similar vulnerability [affects jQuery <3.5.0](https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2).\n\n### Workarounds\nChanging sanitizer configuration not to allow certain tag grouping (e.g. `