diff --git a/advisories/github-reviewed/2022/05/GHSA-mffc-9gx5-99g3/GHSA-mffc-9gx5-99g3.json b/advisories/github-reviewed/2022/05/GHSA-mffc-9gx5-99g3/GHSA-mffc-9gx5-99g3.json index fb0bcc24456..98f009f3d02 100644 --- a/advisories/github-reviewed/2022/05/GHSA-mffc-9gx5-99g3/GHSA-mffc-9gx5-99g3.json +++ b/advisories/github-reviewed/2022/05/GHSA-mffc-9gx5-99g3/GHSA-mffc-9gx5-99g3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mffc-9gx5-99g3", - "modified": "2024-02-23T20:53:08Z", + "modified": "2024-09-27T15:49:07Z", "published": "2022-05-14T01:46:42Z", "aliases": [ "CVE-2015-3206" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -33,6 +37,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "pykerberos" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.1.6" + } + ] + } + ] } ], "references": [ @@ -56,6 +79,18 @@ "type": "PACKAGE", "url": "https://github.com/apple/ccs-pykerberos" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/kerberos/PYSEC-2017-49.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pykerberos/PYSEC-2017-66.yaml" + }, + { + "type": "WEB", + "url": "https://pypi.python.org/pypi/kerberos" + }, { "type": "WEB", "url": "https://web.archive.org/web/20150910143429/https://trac.calendarserver.org/ticket/833" @@ -73,7 +108,7 @@ "cwe_ids": [ "CWE-287" ], - "severity": "HIGH", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-02-23T20:53:08Z", "nvd_published_at": "2017-08-25T18:29:00Z"