diff --git a/advisories/unreviewed/2022/05/GHSA-c33m-22cr-j9x4/GHSA-c33m-22cr-j9x4.json b/advisories/github-reviewed/2022/05/GHSA-c33m-22cr-j9x4/GHSA-c33m-22cr-j9x4.json similarity index 57% rename from advisories/unreviewed/2022/05/GHSA-c33m-22cr-j9x4/GHSA-c33m-22cr-j9x4.json rename to advisories/github-reviewed/2022/05/GHSA-c33m-22cr-j9x4/GHSA-c33m-22cr-j9x4.json index 058f5c2b06b..7da70bb0693 100644 --- a/advisories/unreviewed/2022/05/GHSA-c33m-22cr-j9x4/GHSA-c33m-22cr-j9x4.json +++ b/advisories/github-reviewed/2022/05/GHSA-c33m-22cr-j9x4/GHSA-c33m-22cr-j9x4.json @@ -1,17 +1,29 @@ { "schema_version": "1.4.0", "id": "GHSA-c33m-22cr-j9x4", - "modified": "2022-05-24T17:01:46Z", + "modified": "2024-11-21T22:15:17Z", "published": "2022-05-24T17:01:46Z", "aliases": [ "CVE-2015-5694" ], + "summary": "Designate does not enforce the DNS protocol limit concerning record set sizes", "details": "Designate does not enforce the DNS protocol limit concerning record set sizes", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "designate" + }, + "versions": [ + "2015.1.0b2" + ] + } ], "references": [ { @@ -22,6 +34,14 @@ "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5694" }, + { + "type": "PACKAGE", + "url": "https://github.com/openstack/designate" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/designate/PYSEC-2019-243.yaml" + }, { "type": "WEB", "url": "https://security-tracker.debian.org/tracker/CVE-2015-5694" @@ -37,11 +57,11 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-835" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-11-21T22:15:16Z", "nvd_published_at": "2019-11-22T15:15:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-m6h2-634h-jcpj/GHSA-m6h2-634h-jcpj.json b/advisories/github-reviewed/2022/05/GHSA-m6h2-634h-jcpj/GHSA-m6h2-634h-jcpj.json similarity index 75% rename from advisories/unreviewed/2022/05/GHSA-m6h2-634h-jcpj/GHSA-m6h2-634h-jcpj.json rename to advisories/github-reviewed/2022/05/GHSA-m6h2-634h-jcpj/GHSA-m6h2-634h-jcpj.json index 48715dc0a4a..6127d7b09c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6h2-634h-jcpj/GHSA-m6h2-634h-jcpj.json +++ b/advisories/github-reviewed/2022/05/GHSA-m6h2-634h-jcpj/GHSA-m6h2-634h-jcpj.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-m6h2-634h-jcpj", - "modified": "2022-05-17T01:07:49Z", + "modified": "2024-11-21T22:15:11Z", "published": "2022-05-17T01:07:49Z", "aliases": [ "CVE-2015-5695" ], + "summary": "Designate mDNS DoS through incorrect handling of large RecordSets", "details": "Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.", "severity": [ { @@ -14,7 +15,15 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "designate" + }, + "versions": [ + "2015.1.0b2" + ] + } ], "references": [ { @@ -29,6 +38,10 @@ "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1245241" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/designate/PYSEC-2017-114.yaml" + }, { "type": "WEB", "url": "https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch" @@ -51,8 +64,8 @@ "CWE-400" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-11-21T22:15:11Z", "nvd_published_at": "2017-08-31T22:29:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/11/GHSA-xf2w-5673-h6ww/GHSA-xf2w-5673-h6ww.json b/advisories/github-reviewed/2022/11/GHSA-xf2w-5673-h6ww/GHSA-xf2w-5673-h6ww.json similarity index 54% rename from advisories/unreviewed/2022/11/GHSA-xf2w-5673-h6ww/GHSA-xf2w-5673-h6ww.json rename to advisories/github-reviewed/2022/11/GHSA-xf2w-5673-h6ww/GHSA-xf2w-5673-h6ww.json index 72b11016aaa..57f1271c050 100644 --- a/advisories/unreviewed/2022/11/GHSA-xf2w-5673-h6ww/GHSA-xf2w-5673-h6ww.json +++ b/advisories/github-reviewed/2022/11/GHSA-xf2w-5673-h6ww/GHSA-xf2w-5673-h6ww.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-xf2w-5673-h6ww", - "modified": "2022-11-07T12:00:35Z", + "modified": "2024-11-21T22:14:21Z", "published": "2022-11-04T19:01:09Z", "aliases": [ "CVE-2021-39432" ], + "summary": "diplib Double Free", "details": "diplib v3.0.0 is vulnerable to Double Free.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "diplib" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.1.0" + } + ] + } + ] + } ], "references": [ { @@ -28,6 +47,14 @@ { "type": "WEB", "url": "https://github.com/DIPlib/diplib/commit/8b9a2670ce66ff2fd5addf592f7825e1f5adb5b5" + }, + { + "type": "PACKAGE", + "url": "https://github.com/DIPlib/diplib" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/diplib/PYSEC-2022-43131.yaml" } ], "database_specific": { @@ -35,8 +62,8 @@ "CWE-415" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-11-21T22:14:21Z", "nvd_published_at": "2022-11-04T17:15:00Z" } } \ No newline at end of file