From c2f9ab21783e06df6dc697b8b674fde8646ad1c3 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 6 May 2025 18:02:44 +0000
Subject: [PATCH] Publish GHSA-6v6w-h8m6-7mv2

---
 .../2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json b/advisories/github-reviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json
index 63984d2f3ff..25a31ac9e57 100644
--- a/advisories/github-reviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json
+++ b/advisories/github-reviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6v6w-h8m6-7mv2",
-  "modified": "2025-05-02T03:18:19Z",
+  "modified": "2025-05-06T18:00:48Z",
   "published": "2024-02-29T12:31:06Z",
   "aliases": [
     "CVE-2024-27906"
@@ -9,10 +9,6 @@
   "summary": "Apache Airflow: DAG Code and Import Error Permissions Ignored",
   "details": "Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.\n\nUsers of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability",
   "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
-    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
@@ -110,7 +106,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-668"
+      "CWE-668",
+      "CWE-862"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,