From b8af8e67282ade86ead06f039505f8efce623108 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 18 Oct 2024 22:00:25 +0000
Subject: [PATCH] Publish Advisories

GHSA-6528-wvf6-f6qg
GHSA-cq27-v7xp-c356
GHSA-7qqv-r2q4-jxhm
GHSA-7xc5-ggpp-g249
---
 .../GHSA-6528-wvf6-f6qg.json                  | 10 +++++++++-
 .../GHSA-cq27-v7xp-c356.json                  | 18 ++++++++---------
 .../GHSA-7qqv-r2q4-jxhm.json                  | 12 +++++++++--
 .../GHSA-7xc5-ggpp-g249.json                  | 20 ++++++++++++-------
 4 files changed, 41 insertions(+), 19 deletions(-)

diff --git a/advisories/github-reviewed/2018/07/GHSA-6528-wvf6-f6qg/GHSA-6528-wvf6-f6qg.json b/advisories/github-reviewed/2018/07/GHSA-6528-wvf6-f6qg/GHSA-6528-wvf6-f6qg.json
index fd6dcb190fa..6ac60f5698e 100644
--- a/advisories/github-reviewed/2018/07/GHSA-6528-wvf6-f6qg/GHSA-6528-wvf6-f6qg.json
+++ b/advisories/github-reviewed/2018/07/GHSA-6528-wvf6-f6qg/GHSA-6528-wvf6-f6qg.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6528-wvf6-f6qg",
-  "modified": "2022-04-26T18:13:29Z",
+  "modified": "2024-10-18T21:58:31Z",
   "published": "2018-07-12T20:29:26Z",
   "aliases": [
     "CVE-2018-6594"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -56,6 +60,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/dlitz/pycrypto"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pycrypto/PYSEC-2018-97.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00018.html"
diff --git a/advisories/github-reviewed/2018/12/GHSA-cq27-v7xp-c356/GHSA-cq27-v7xp-c356.json b/advisories/github-reviewed/2018/12/GHSA-cq27-v7xp-c356/GHSA-cq27-v7xp-c356.json
index b2da9819c50..d54b317e421 100644
--- a/advisories/github-reviewed/2018/12/GHSA-cq27-v7xp-c356/GHSA-cq27-v7xp-c356.json
+++ b/advisories/github-reviewed/2018/12/GHSA-cq27-v7xp-c356/GHSA-cq27-v7xp-c356.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cq27-v7xp-c356",
-  "modified": "2022-09-14T22:11:10Z",
+  "modified": "2024-10-18T21:59:58Z",
   "published": "2018-12-14T18:51:38Z",
   "aliases": [
     "CVE-2013-7459"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -60,6 +64,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/dlitz/pycrypto"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pycrypto/PYSEC-2017-94.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C6BWNADPLKDBBQBUT3P75W7HAJCE7M3B"
@@ -68,10 +76,6 @@
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJ37R2YLX56YZABFNAOWV4VTHTGYREAE"
     },
-    {
-      "type": "WEB",
-      "url": "https://pony7.fr/ctf:public:32c3:cryptmsg"
-    },
     {
       "type": "WEB",
       "url": "https://security.gentoo.org/glsa/201702-14"
@@ -79,10 +83,6 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2016/12/27/8"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/95122"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2019/01/GHSA-7qqv-r2q4-jxhm/GHSA-7qqv-r2q4-jxhm.json b/advisories/github-reviewed/2019/01/GHSA-7qqv-r2q4-jxhm/GHSA-7qqv-r2q4-jxhm.json
index 9cb034acadc..3949eec9db6 100644
--- a/advisories/github-reviewed/2019/01/GHSA-7qqv-r2q4-jxhm/GHSA-7qqv-r2q4-jxhm.json
+++ b/advisories/github-reviewed/2019/01/GHSA-7qqv-r2q4-jxhm/GHSA-7qqv-r2q4-jxhm.json
@@ -1,17 +1,21 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7qqv-r2q4-jxhm",
-  "modified": "2021-09-03T21:43:07Z",
+  "modified": "2024-10-18T21:59:13Z",
   "published": "2019-01-14T16:19:31Z",
   "aliases": [
     "CVE-2018-1000809"
   ],
-  "summary": "High severity vulnerability that affects privacyIDEA",
+  "summary": "privacyIDEA Improper Input Validation vulnerability",
   "details": "privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -55,6 +59,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/privacyidea/privacyidea"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/privacyidea/PYSEC-2018-20.yaml"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2021/04/GHSA-7xc5-ggpp-g249/GHSA-7xc5-ggpp-g249.json b/advisories/github-reviewed/2021/04/GHSA-7xc5-ggpp-g249/GHSA-7xc5-ggpp-g249.json
index 9fbd7aa93cb..0031a724b2c 100644
--- a/advisories/github-reviewed/2021/04/GHSA-7xc5-ggpp-g249/GHSA-7xc5-ggpp-g249.json
+++ b/advisories/github-reviewed/2021/04/GHSA-7xc5-ggpp-g249/GHSA-7xc5-ggpp-g249.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7xc5-ggpp-g249",
-  "modified": "2023-08-07T11:51:29Z",
+  "modified": "2024-10-18T21:58:01Z",
   "published": "2021-04-20T16:13:24Z",
   "aliases": [
     "CVE-2020-28468"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -20,12 +24,6 @@
         "ecosystem": "PyPI",
         "name": "pwntools"
       },
-      "ecosystem_specific": {
-        "affected_functions": [
-          "pwnlib.shellcraft.pretty",
-          "pwnlib.constants.ConstantsModule.eval"
-        ]
-      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -62,6 +60,14 @@
       "type": "PACKAGE",
       "url": "https://github.com/Gallopsled/pwntools"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-7xc5-ggpp-g249"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pwntools/PYSEC-2021-72.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://snyk.io/vuln/SNYK-PYTHON-PWNTOOLS-1047345"