diff --git a/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json b/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json index b6eb5c3997a..545cf88ea5d 100644 --- a/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json +++ b/advisories/github-reviewed/2017/10/GHSA-c43v-hrmg-56r4/GHSA-c43v-hrmg-56r4.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-c43v-hrmg-56r4", - "modified": "2023-01-23T20:58:45Z", + "modified": "2023-09-05T21:12:28Z", "published": "2017-10-24T18:33:37Z", "aliases": [ "CVE-2013-4457" ], - "summary": "Cocaine OS Command Injection vulnerability", + "summary": "Cocaine Gem OS Command Injection vulnerability", "details": "The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.", "severity": [ @@ -17,6 +17,11 @@ "ecosystem": "RubyGems", "name": "cocaine" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", diff --git a/advisories/github-reviewed/2017/10/GHSA-c92m-rrrc-q5wf/GHSA-c92m-rrrc-q5wf.json b/advisories/github-reviewed/2017/10/GHSA-c92m-rrrc-q5wf/GHSA-c92m-rrrc-q5wf.json index f8fa554d03f..668bc5a029a 100644 --- a/advisories/github-reviewed/2017/10/GHSA-c92m-rrrc-q5wf/GHSA-c92m-rrrc-q5wf.json +++ b/advisories/github-reviewed/2017/10/GHSA-c92m-rrrc-q5wf/GHSA-c92m-rrrc-q5wf.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-c92m-rrrc-q5wf", - "modified": "2023-01-23T20:59:29Z", + "modified": "2023-09-05T21:11:43Z", "published": "2017-10-24T18:33:35Z", "aliases": [ "CVE-2016-3693" ], - "summary": "safemode allows context-dependent attackers to obtain sensitive information via the inspect method", + "summary": "safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method", "details": "The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.", "severity": [ { @@ -20,6 +20,11 @@ "ecosystem": "RubyGems", "name": "safemode" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -80,6 +85,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:30:40Z", - "nvd_published_at": null + "nvd_published_at": "2016-05-20T14:59:00Z" } } \ No newline at end of file