Publish GHSA-876p-c77m-x2hc

advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json

@@ -1,17 +1,21 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-876p-c77m-x2hc",
-  "modified": "2024-07-11T21:31:39Z",
+  "modified": "2024-09-04T16:39:10Z",
   "published": "2024-07-01T15:32:17Z",
   "aliases": [
     "CVE-2024-38996"
   ],
   "summary": "Prototype pollution in ag-grid-community via the _.mergeDeep function",
-  "details": "ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.",
+  "details": "ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Prior versions were also found to be affected.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
     }
   ],
   "affected": [
@@ -25,16 +29,13 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "31.3.2"
+              "introduced": "0"
             },
             {
-              "fixed": "32.0.1"
+              "fixed": "31.3.4"
             }
           ]
         }
-      ],
-      "versions": [
-        "31.3.2"
       ]
     },
     {
@@ -47,16 +48,13 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "31.3.2"
+              "introduced": "0"
             },
             {
-              "fixed": "32.0.1"
+              "fixed": "31.3.4"
             }
           ]
         }
-      ],
-      "versions": [
-        "31.3.2"
       ]
     }
   ],
@@ -90,7 +88,7 @@
     "cwe_ids": [
       "CWE-1321"
     ],
-    "severity": "CRITICAL",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-07-01T22:34:03Z",
     "nvd_published_at": "2024-07-01T13:15:05Z"