From c2bcebe306b7b600c3c701478985f88d8b59385f Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 4 Sep 2024 16:40:38 +0000
Subject: [PATCH] Publish GHSA-876p-c77m-x2hc

---
 .../GHSA-876p-c77m-x2hc.json                  | 24 +++++++++----------
 1 file changed, 11 insertions(+), 13 deletions(-)

diff --git a/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json b/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json
index 4b8f31473ce..645a1bc1a45 100644
--- a/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json
+++ b/advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json
@@ -1,17 +1,21 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-876p-c77m-x2hc",
-  "modified": "2024-07-11T21:31:39Z",
+  "modified": "2024-09-04T16:39:10Z",
   "published": "2024-07-01T15:32:17Z",
   "aliases": [
     "CVE-2024-38996"
   ],
   "summary": "Prototype pollution in ag-grid-community via the _.mergeDeep function",
-  "details": "ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.",
+  "details": "ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Prior versions were also found to be affected.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
     }
   ],
   "affected": [
@@ -25,16 +29,13 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "31.3.2"
+              "introduced": "0"
             },
             {
-              "fixed": "32.0.1"
+              "fixed": "31.3.4"
             }
           ]
         }
-      ],
-      "versions": [
-        "31.3.2"
       ]
     },
     {
@@ -47,16 +48,13 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "31.3.2"
+              "introduced": "0"
             },
             {
-              "fixed": "32.0.1"
+              "fixed": "31.3.4"
             }
           ]
         }
-      ],
-      "versions": [
-        "31.3.2"
       ]
     }
   ],
@@ -90,7 +88,7 @@
     "cwe_ids": [
       "CWE-1321"
     ],
-    "severity": "CRITICAL",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-07-01T22:34:03Z",
     "nvd_published_at": "2024-07-01T13:15:05Z"