Publish GHSA-qppj-fm5r-hxr3

This commit is contained in:
advisory-database[bot]
2024-03-05 21:49:12 +00:00
parent 9aa26e52f0
commit ba32ba3244
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qppj-fm5r-hxr3",
"modified": "2024-02-09T00:30:47Z",
"modified": "2024-03-05T21:48:12Z",
"published": "2023-10-10T21:28:24Z",
"aliases": [
"CVE-2023-44487"
@@ -261,6 +261,158 @@
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:http2-common"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.3.0"
},
{
"fixed": "9.4.53"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:http2-common"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.17"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:http2-common"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0.0"
},
{
"fixed": "11.0.17"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:http2-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.3.0"
},
{
"fixed": "9.4.53"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:http2-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.17"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:http2-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0.0"
},
{
"fixed": "11.0.17"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:jetty-http2-common"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "12.0.0"
},
{
"fixed": "12.0.2"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.eclipse.jetty.http2:jetty-http2-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "12.0.0"
},
{
"fixed": "12.0.2"
}
]
}
]
}
],
"references": [
@@ -892,6 +1044,10 @@
"type": "WEB",
"url": "https://www.debian.org/security/2023/dsa-5570"
},
{
"type": "WEB",
"url": "https://www.eclipse.org/lists/jetty-announce/msg00181.html"
},
{
"type": "WEB",
"url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487"