From c5e74a96f234a5bc2b381f5eedb3ce61738f1e55 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 22 Nov 2024 20:46:31 +0000
Subject: [PATCH] Publish Advisories

GHSA-3863-2447-669p
GHSA-v68g-wm8c-6x7j
GHSA-6845-xw22-ffxv
GHSA-9x7f-gwxq-6f2c
GHSA-gp3w-2v2m-p686
---
 .../12/GHSA-3863-2447-669p/GHSA-3863-2447-669p.json   | 11 +++++------
 .../12/GHSA-v68g-wm8c-6x7j/GHSA-v68g-wm8c-6x7j.json   |  6 +++++-
 .../02/GHSA-6845-xw22-ffxv/GHSA-6845-xw22-ffxv.json   |  6 +++++-
 .../02/GHSA-9x7f-gwxq-6f2c/GHSA-9x7f-gwxq-6f2c.json   |  6 +++++-
 .../02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json   |  6 +++++-
 5 files changed, 25 insertions(+), 10 deletions(-)

diff --git a/advisories/github-reviewed/2023/12/GHSA-3863-2447-669p/GHSA-3863-2447-669p.json b/advisories/github-reviewed/2023/12/GHSA-3863-2447-669p/GHSA-3863-2447-669p.json
index f73fa686752..77a0092b971 100644
--- a/advisories/github-reviewed/2023/12/GHSA-3863-2447-669p/GHSA-3863-2447-669p.json
+++ b/advisories/github-reviewed/2023/12/GHSA-3863-2447-669p/GHSA-3863-2447-669p.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3863-2447-669p",
-  "modified": "2023-12-19T23:16:40Z",
+  "modified": "2024-11-22T20:44:47Z",
   "published": "2023-12-19T15:30:30Z",
   "aliases": [
     "CVE-2023-6730"
@@ -20,11 +20,6 @@
         "ecosystem": "PyPI",
         "name": "transformers"
       },
-      "ecosystem_specific": {
-        "affected_functions": [
-          "transformers.models.rag.retrieval_rag"
-        ]
-      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -53,6 +48,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/huggingface/transformers"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-300.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/423611ee-7a2a-442a-babb-3ed2f8385c16"
diff --git a/advisories/github-reviewed/2023/12/GHSA-v68g-wm8c-6x7j/GHSA-v68g-wm8c-6x7j.json b/advisories/github-reviewed/2023/12/GHSA-v68g-wm8c-6x7j/GHSA-v68g-wm8c-6x7j.json
index ca23a778365..3d94d1add11 100644
--- a/advisories/github-reviewed/2023/12/GHSA-v68g-wm8c-6x7j/GHSA-v68g-wm8c-6x7j.json
+++ b/advisories/github-reviewed/2023/12/GHSA-v68g-wm8c-6x7j/GHSA-v68g-wm8c-6x7j.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v68g-wm8c-6x7j",
-  "modified": "2024-01-02T15:27:25Z",
+  "modified": "2024-11-22T20:45:13Z",
   "published": "2023-12-20T18:30:32Z",
   "aliases": [
     "CVE-2023-7018"
@@ -48,6 +48,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/huggingface/transformers"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-301.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/e1a3e548-e53a-48df-b708-9ee62140963c"
diff --git a/advisories/github-reviewed/2024/02/GHSA-6845-xw22-ffxv/GHSA-6845-xw22-ffxv.json b/advisories/github-reviewed/2024/02/GHSA-6845-xw22-ffxv/GHSA-6845-xw22-ffxv.json
index b9e415434d4..5e1fe0506ed 100644
--- a/advisories/github-reviewed/2024/02/GHSA-6845-xw22-ffxv/GHSA-6845-xw22-ffxv.json
+++ b/advisories/github-reviewed/2024/02/GHSA-6845-xw22-ffxv/GHSA-6845-xw22-ffxv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6845-xw22-ffxv",
-  "modified": "2024-06-18T15:14:29Z",
+  "modified": "2024-11-22T20:45:28Z",
   "published": "2024-02-05T19:21:52Z",
   "aliases": [
     "CVE-2024-24559"
@@ -52,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/vyperlang/vyper/commit/d9f9fdadd81a148cbc68f02dbbbcdc0c92fad652"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2024-147.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/vyperlang/vyper"
diff --git a/advisories/github-reviewed/2024/02/GHSA-9x7f-gwxq-6f2c/GHSA-9x7f-gwxq-6f2c.json b/advisories/github-reviewed/2024/02/GHSA-9x7f-gwxq-6f2c/GHSA-9x7f-gwxq-6f2c.json
index 3629a549f5d..6cd6baa35f4 100644
--- a/advisories/github-reviewed/2024/02/GHSA-9x7f-gwxq-6f2c/GHSA-9x7f-gwxq-6f2c.json
+++ b/advisories/github-reviewed/2024/02/GHSA-9x7f-gwxq-6f2c/GHSA-9x7f-gwxq-6f2c.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9x7f-gwxq-6f2c",
-  "modified": "2024-03-21T21:59:41Z",
+  "modified": "2024-11-22T20:46:01Z",
   "published": "2024-02-01T20:51:32Z",
   "aliases": [
     "CVE-2024-24561"
@@ -51,6 +51,10 @@
       "type": "WEB",
       "url": "https://github.com/vyperlang/vyper/issues/3756"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2024-149.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/vyperlang/vyper"
diff --git a/advisories/github-reviewed/2024/02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json b/advisories/github-reviewed/2024/02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json
index 7011107b5ec..b8caa091e12 100644
--- a/advisories/github-reviewed/2024/02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json
+++ b/advisories/github-reviewed/2024/02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gp3w-2v2m-p686",
-  "modified": "2024-06-18T15:17:07Z",
+  "modified": "2024-11-22T20:45:44Z",
   "published": "2024-02-02T18:10:10Z",
   "aliases": [
     "CVE-2024-24560"
@@ -44,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24560"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2024-148.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/vyperlang/vyper"