diff --git a/advisories/github-reviewed/2025/02/GHSA-6fgm-x6ff-w78f/GHSA-6fgm-x6ff-w78f.json b/advisories/github-reviewed/2025/02/GHSA-6fgm-x6ff-w78f/GHSA-6fgm-x6ff-w78f.json index 62c6b09b2d4..56e3d59d74b 100644 --- a/advisories/github-reviewed/2025/02/GHSA-6fgm-x6ff-w78f/GHSA-6fgm-x6ff-w78f.json +++ b/advisories/github-reviewed/2025/02/GHSA-6fgm-x6ff-w78f/GHSA-6fgm-x6ff-w78f.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6fgm-x6ff-w78f", - "modified": "2025-02-12T22:01:24Z", + "modified": "2025-03-11T17:14:26Z", "published": "2025-02-12T22:01:24Z", "aliases": [], "summary": "Potential Denial-of-Service condition leading to temporary disability in IBC transfers to the native chain", @@ -50,6 +50,63 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 7.2.1" + } + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v5" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 7.2.1" + } + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v6" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 7.2.1" + } } ], "references": [ diff --git a/advisories/github-reviewed/2025/03/GHSA-mf24-chxh-hmvj/GHSA-mf24-chxh-hmvj.json b/advisories/github-reviewed/2025/03/GHSA-mf24-chxh-hmvj/GHSA-mf24-chxh-hmvj.json index d5afa949401..227eb203f0a 100644 --- a/advisories/github-reviewed/2025/03/GHSA-mf24-chxh-hmvj/GHSA-mf24-chxh-hmvj.json +++ b/advisories/github-reviewed/2025/03/GHSA-mf24-chxh-hmvj/GHSA-mf24-chxh-hmvj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mf24-chxh-hmvj", - "modified": "2025-03-06T21:36:34Z", + "modified": "2025-03-11T17:15:37Z", "published": "2025-03-06T19:11:39Z", "aliases": [ "CVE-2025-25294" @@ -86,6 +86,10 @@ { "type": "WEB", "url": "https://github.com/envoyproxy/gateway/releases/tag/v1.3.1" + }, + { + "type": "WEB", + "url": "https://pkg.go.dev/vuln/GO-2025-3504" } ], "database_specific": {