diff --git a/advisories/github-reviewed/2023/09/GHSA-6qjf-7g3j-qx25/GHSA-6qjf-7g3j-qx25.json b/advisories/github-reviewed/2023/09/GHSA-6qjf-7g3j-qx25/GHSA-6qjf-7g3j-qx25.json index dabacb893f0..e4a7194ad7e 100644 --- a/advisories/github-reviewed/2023/09/GHSA-6qjf-7g3j-qx25/GHSA-6qjf-7g3j-qx25.json +++ b/advisories/github-reviewed/2023/09/GHSA-6qjf-7g3j-qx25/GHSA-6qjf-7g3j-qx25.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6qjf-7g3j-qx25", - "modified": "2023-09-22T20:40:11Z", + "modified": "2024-01-16T17:08:22Z", "published": "2023-09-19T00:30:13Z", "aliases": [ "CVE-2023-37611" @@ -18,7 +18,7 @@ { "package": { "ecosystem": "Packagist", - "name": "neos/neos-ui" + "name": "neos/media-browser" }, "ranges": [ { @@ -28,7 +28,83 @@ "introduced": "0" }, { - "last_affected": "8.3.3" + "fixed": "7.3.19" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "neos/media-browser" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.0.16" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "neos/media-browser" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.1.0" + }, + { + "fixed": "8.1.11" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "neos/media-browser" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.2.0" + }, + { + "fixed": "8.2.11" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "neos/media-browser" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.3.0" + }, + { + "fixed": "8.3.9" } ] } @@ -40,6 +116,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37611" }, + { + "type": "WEB", + "url": "https://github.com/neos/neos-development-collection/issues/4833" + }, + { + "type": "WEB", + "url": "https://github.com/neos/neos-development-collection/pull/4812" + }, + { + "type": "WEB", + "url": "https://github.com/neos/neos-development-collection/commit/4ac0df04d2e44e164e95887b466075dde3f04045" + }, { "type": "WEB", "url": "https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html" @@ -50,7 +138,7 @@ }, { "type": "PACKAGE", - "url": "https://github.com/neos/neos-ui" + "url": "https://github.com/neos/neos-development-collection" }, { "type": "WEB",