From ba1f7ad4efb0a4ad775501af23fe611759faa948 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 20 Sep 2024 21:05:25 +0000 Subject: [PATCH] Publish Advisories GHSA-5wv5-4vpf-pj6m GHSA-hggv-mcp4-vxc5 GHSA-2mqj-m65w-jghx --- .../GHSA-5wv5-4vpf-pj6m/GHSA-5wv5-4vpf-pj6m.json | 16 ++++++++++++++-- .../GHSA-hggv-mcp4-vxc5/GHSA-hggv-mcp4-vxc5.json | 6 +++++- .../GHSA-2mqj-m65w-jghx/GHSA-2mqj-m65w-jghx.json | 6 +++++- 3 files changed, 24 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2019/07/GHSA-5wv5-4vpf-pj6m/GHSA-5wv5-4vpf-pj6m.json b/advisories/github-reviewed/2019/07/GHSA-5wv5-4vpf-pj6m/GHSA-5wv5-4vpf-pj6m.json index b681c346502..6f340e619bf 100644 --- a/advisories/github-reviewed/2019/07/GHSA-5wv5-4vpf-pj6m/GHSA-5wv5-4vpf-pj6m.json +++ b/advisories/github-reviewed/2019/07/GHSA-5wv5-4vpf-pj6m/GHSA-5wv5-4vpf-pj6m.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5wv5-4vpf-pj6m", - "modified": "2023-08-07T15:15:22Z", + "modified": "2024-09-20T21:04:58Z", "published": "2019-07-19T16:12:46Z", "aliases": [ "CVE-2019-1010083" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "flask" + "name": "Flask" }, "ranges": [ { @@ -40,10 +44,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010083" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-5wv5-4vpf-pj6m" + }, { "type": "PACKAGE", "url": "https://github.com/pallets/flask" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2019-179.yaml" + }, { "type": "WEB", "url": "https://www.palletsprojects.com/blog/flask-1-0-released" diff --git a/advisories/github-reviewed/2022/03/GHSA-hggv-mcp4-vxc5/GHSA-hggv-mcp4-vxc5.json b/advisories/github-reviewed/2022/03/GHSA-hggv-mcp4-vxc5/GHSA-hggv-mcp4-vxc5.json index ef10927e848..0f3baf3e9f5 100644 --- a/advisories/github-reviewed/2022/03/GHSA-hggv-mcp4-vxc5/GHSA-hggv-mcp4-vxc5.json +++ b/advisories/github-reviewed/2022/03/GHSA-hggv-mcp4-vxc5/GHSA-hggv-mcp4-vxc5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hggv-mcp4-vxc5", - "modified": "2022-03-24T23:45:34Z", + "modified": "2024-09-20T21:03:38Z", "published": "2022-03-12T00:00:37Z", "aliases": [ "CVE-2022-25508" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ diff --git a/advisories/github-reviewed/2024/01/GHSA-2mqj-m65w-jghx/GHSA-2mqj-m65w-jghx.json b/advisories/github-reviewed/2024/01/GHSA-2mqj-m65w-jghx/GHSA-2mqj-m65w-jghx.json index 95948a91cca..8425824553e 100644 --- a/advisories/github-reviewed/2024/01/GHSA-2mqj-m65w-jghx/GHSA-2mqj-m65w-jghx.json +++ b/advisories/github-reviewed/2024/01/GHSA-2mqj-m65w-jghx/GHSA-2mqj-m65w-jghx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2mqj-m65w-jghx", - "modified": "2024-01-19T16:24:47Z", + "modified": "2024-09-20T21:04:19Z", "published": "2024-01-10T15:46:00Z", "aliases": [ "CVE-2024-22190" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [