Publish Advisories

GHSA-58vj-cv5w-v4v6
GHSA-62c8-mh53-4cqv
GHSA-68j8-fp38-p48q
GHSA-c459-2m73-67hj
GHSA-hpc8-7wpm-889w
This commit is contained in:
advisory-database[bot]
2024-09-20 14:53:12 +00:00
parent 2257d13957
commit c0deaf3725
5 changed files with 115 additions and 9 deletions
File diff suppressed because one or more lines are too long
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-62c8-mh53-4cqv",
"modified": "2024-09-19T14:48:10Z",
"modified": "2024-09-20T14:52:02Z",
"published": "2024-09-19T14:48:10Z",
"aliases": [
"CVE-2024-45410"
@@ -82,6 +82,10 @@
"type": "WEB",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-62c8-mh53-4cqv"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45410"
},
{
"type": "WEB",
"url": "https://github.com/traefik/traefik/commit/584144100524277829f26219baaab29a53b8134f"
@@ -107,6 +111,6 @@
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-09-19T14:48:10Z",
"nvd_published_at": null
"nvd_published_at": "2024-09-19T23:15:11Z"
}
}
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-68j8-fp38-p48q",
"modified": "2024-09-19T14:49:41Z",
"modified": "2024-09-20T14:52:32Z",
"published": "2024-09-19T14:49:40Z",
"aliases": [
"CVE-2024-46984"
@@ -44,13 +44,37 @@
"type": "WEB",
"url": "https://github.com/gematik/app-referencevalidator/security/advisories/GHSA-68j8-fp38-p48q"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46984"
},
{
"type": "WEB",
"url": "https://github.com/gematik/app-referencevalidator/commit/d6d27613fab7a8dd08534946f29e0c51f319cad6"
},
{
"type": "WEB",
"url": "https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#transformerfactory"
},
{
"type": "PACKAGE",
"url": "https://github.com/gematik/app-referencevalidator"
},
{
"type": "WEB",
"url": "https://github.com/gematik/app-referencevalidator/releases/tag/2.5.1"
},
{
"type": "WEB",
"url": "https://owasp.org/www-community/attacks/Server_Side_Request_Forgery"
},
{
"type": "WEB",
"url": "https://owasp.org/www-project-top-ten/2017/A4_2017-XML_External_Entities_(XXE)"
},
{
"type": "WEB",
"url": "https://owasp.org/www-project-top-ten/2017/A4_2017-XML_External_Entities_(XXE)#"
}
],
"database_specific": {
@@ -60,6 +84,6 @@
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-09-19T14:49:40Z",
"nvd_published_at": null
"nvd_published_at": "2024-09-19T23:15:12Z"
}
}
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c459-2m73-67hj",
"modified": "2024-09-19T14:49:20Z",
"modified": "2024-09-20T14:52:13Z",
"published": "2024-09-19T14:49:20Z",
"aliases": [
"CVE-2024-46983"
@@ -44,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/sofastack/sofa-hessian/security/advisories/GHSA-c459-2m73-67hj"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46983"
},
{
"type": "WEB",
"url": "https://github.com/sofastack/sofa-hessian/commit/764ef4b216aee6aeb4b111aec8947a4e8b53bb87"
@@ -55,11 +59,12 @@
],
"database_specific": {
"cwe_ids": [
"CWE-502"
"CWE-502",
"CWE-74"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-09-19T14:49:20Z",
"nvd_published_at": null
"nvd_published_at": "2024-09-19T23:15:11Z"
}
}
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hpc8-7wpm-889w",
"modified": "2024-09-19T14:47:36Z",
"modified": "2024-09-20T14:51:45Z",
"published": "2024-09-19T14:47:36Z",
"aliases": [
"CVE-2023-27584"
@@ -44,6 +44,10 @@
"type": "WEB",
"url": "https://github.com/dragonflyoss/Dragonfly2/security/advisories/GHSA-hpc8-7wpm-889w"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27584"
},
{
"type": "WEB",
"url": "https://github.com/dragonflyoss/Dragonfly2/commit/e9da69dc4048bf2a18a671be94616d85e3429433"
@@ -51,6 +55,10 @@
{
"type": "PACKAGE",
"url": "https://github.com/dragonflyoss/Dragonfly2"
},
{
"type": "WEB",
"url": "https://github.com/dragonflyoss/Dragonfly2/releases/tag/v2.0.9"
}
],
"database_specific": {
@@ -60,6 +68,6 @@
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-09-19T14:47:36Z",
"nvd_published_at": null
"nvd_published_at": "2024-09-19T23:15:11Z"
}
}