From c981fc6bd9c6cd9285ed27dc8472e7f2d356b02e Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 2 Oct 2023 16:35:20 +0000
Subject: [PATCH] Publish Advisories

GHSA-5m2v-hc64-56h6
GHSA-mv93-wvcp-7m7r
---
 .../GHSA-5m2v-hc64-56h6.json                  |  4 +++
 .../GHSA-mv93-wvcp-7m7r.json                  | 28 +++++--------------
 2 files changed, 11 insertions(+), 21 deletions(-)

diff --git a/advisories/github-reviewed/2019/09/GHSA-5m2v-hc64-56h6/GHSA-5m2v-hc64-56h6.json b/advisories/github-reviewed/2019/09/GHSA-5m2v-hc64-56h6/GHSA-5m2v-hc64-56h6.json
index 75949481dc6..24880e9ac14 100644
--- a/advisories/github-reviewed/2019/09/GHSA-5m2v-hc64-56h6/GHSA-5m2v-hc64-56h6.json
+++ b/advisories/github-reviewed/2019/09/GHSA-5m2v-hc64-56h6/GHSA-5m2v-hc64-56h6.json
@@ -49,6 +49,10 @@
       "type": "WEB",
       "url": "https://github.com/rubyzip/rubyzip/pull/403"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubyzip/rubyzip/commit/d65fe7bd283ec94f9d6dc7605f61a6b0dd00f55e"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHBA-2019:4047"
diff --git a/advisories/github-reviewed/2022/05/GHSA-mv93-wvcp-7m7r/GHSA-mv93-wvcp-7m7r.json b/advisories/github-reviewed/2022/05/GHSA-mv93-wvcp-7m7r/GHSA-mv93-wvcp-7m7r.json
index 467b8a957b1..c8e42363ffd 100644
--- a/advisories/github-reviewed/2022/05/GHSA-mv93-wvcp-7m7r/GHSA-mv93-wvcp-7m7r.json
+++ b/advisories/github-reviewed/2022/05/GHSA-mv93-wvcp-7m7r/GHSA-mv93-wvcp-7m7r.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mv93-wvcp-7m7r",
-  "modified": "2023-02-08T00:34:13Z",
+  "modified": "2023-10-02T16:33:31Z",
   "published": "2022-05-13T01:26:08Z",
   "aliases": [
     "CVE-2018-17848"
   ],
   "summary": "golang.org/x/net/html Improper Validation of Array Index vulnerability",
-  "details": "The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a \"panic: runtime error\" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.",
+  "details": "The html package (aka `x/net/html`) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a \"panic: runtime error\" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -15,30 +15,16 @@
     }
   ],
   "affected": [
-    {
-      "package": {
-        "ecosystem": "Go",
-        "name": "golang.org/x/net/html"
-      },
-      "ranges": [
-        {
-          "type": "ECOSYSTEM",
-          "events": [
-            {
-              "introduced": "0"
-            },
-            {
-              "fixed": "0.0.0-20190125002852-4b62a64f59f7"
-            }
-          ]
-        }
-      ]
-    },
     {
       "package": {
         "ecosystem": "Go",
         "name": "golang.org/x/net"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",