From c90201567080d72ad69fcc23f78a6626f506f867 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 9 Jun 2023 20:05:08 +0000 Subject: [PATCH] Publish Advisories GHSA-9qj7-jvg4-qr2x GHSA-2p82-v77v-mppr --- .../2017/10/GHSA-9qj7-jvg4-qr2x/GHSA-9qj7-jvg4-qr2x.json | 4 ++++ .../2019/09/GHSA-2p82-v77v-mppr/GHSA-2p82-v77v-mppr.json | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2017/10/GHSA-9qj7-jvg4-qr2x/GHSA-9qj7-jvg4-qr2x.json b/advisories/github-reviewed/2017/10/GHSA-9qj7-jvg4-qr2x/GHSA-9qj7-jvg4-qr2x.json index 85538013057..7b0093a4615 100644 --- a/advisories/github-reviewed/2017/10/GHSA-9qj7-jvg4-qr2x/GHSA-9qj7-jvg4-qr2x.json +++ b/advisories/github-reviewed/2017/10/GHSA-9qj7-jvg4-qr2x/GHSA-9qj7-jvg4-qr2x.json @@ -72,6 +72,10 @@ "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-9qj7-jvg4-qr2x" }, + { + "type": "WEB", + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2013-2119.yml" + }, { "type": "WEB", "url": "http://blog.phusion.nl/2013/05/29/phusion-passenger-3-0-21-released/" diff --git a/advisories/github-reviewed/2019/09/GHSA-2p82-v77v-mppr/GHSA-2p82-v77v-mppr.json b/advisories/github-reviewed/2019/09/GHSA-2p82-v77v-mppr/GHSA-2p82-v77v-mppr.json index 6e1bff7b45e..f8b0876d38f 100644 --- a/advisories/github-reviewed/2019/09/GHSA-2p82-v77v-mppr/GHSA-2p82-v77v-mppr.json +++ b/advisories/github-reviewed/2019/09/GHSA-2p82-v77v-mppr/GHSA-2p82-v77v-mppr.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-2p82-v77v-mppr", - "modified": "2021-08-17T22:26:27Z", + "modified": "2023-06-09T20:03:44Z", "published": "2019-09-11T23:05:57Z", "aliases": [ "CVE-2019-16060" ], - "summary": "Airbrake", + "summary": "Airbrake keys not being filtered", "details": "The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected).", "severity": [ {