From ca27f4a76f955d933116744f6e0942f2c0232cbb Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 17:17:10 +0000
Subject: [PATCH] Publish Advisories

GHSA-hjf3-r7gw-9rwg
GHSA-434h-p4gx-jm89
---
 .../GHSA-hjf3-r7gw-9rwg.json                  | 49 +++++++++++--------
 .../GHSA-434h-p4gx-jm89.json                  | 10 +++-
 2 files changed, 37 insertions(+), 22 deletions(-)

diff --git a/advisories/github-reviewed/2018/07/GHSA-hjf3-r7gw-9rwg/GHSA-hjf3-r7gw-9rwg.json b/advisories/github-reviewed/2018/07/GHSA-hjf3-r7gw-9rwg/GHSA-hjf3-r7gw-9rwg.json
index 3b90612a684..92ea3a9fba4 100644
--- a/advisories/github-reviewed/2018/07/GHSA-hjf3-r7gw-9rwg/GHSA-hjf3-r7gw-9rwg.json
+++ b/advisories/github-reviewed/2018/07/GHSA-hjf3-r7gw-9rwg/GHSA-hjf3-r7gw-9rwg.json
@@ -1,15 +1,22 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hjf3-r7gw-9rwg",
-  "modified": "2020-06-16T21:40:30Z",
+  "modified": "2024-09-20T17:15:41Z",
   "published": "2018-07-24T20:00:41Z",
   "aliases": [
     "CVE-2012-2921"
   ],
-  "summary": "Moderate severity vulnerability that affects feedparser",
+  "summary": "feedparser denial of service vulnerability",
   "details": "Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -49,6 +56,22 @@
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-hjf3-r7gw-9rwg"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/kurtmckee/feedparser"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/feedparser/PYSEC-2012-14.yaml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20120604210617/http://www.securityfocus.com/bid/53654"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20150523060531/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:118/?name=MDVSA-2013:118"
+    },
     {
       "type": "WEB",
       "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0157"
@@ -56,29 +79,13 @@
     {
       "type": "WEB",
       "url": "http://freecode.com/projects/feedparser/releases/344371"
-    },
-    {
-      "type": "WEB",
-      "url": "http://osvdb.org/81701"
-    },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/49256"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:118"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/53654"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-611"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2020-06-16T21:40:30Z",
     "nvd_published_at": null
diff --git a/advisories/github-reviewed/2021/05/GHSA-434h-p4gx-jm89/GHSA-434h-p4gx-jm89.json b/advisories/github-reviewed/2021/05/GHSA-434h-p4gx-jm89/GHSA-434h-p4gx-jm89.json
index 61cb09f9b6c..a50e39365fa 100644
--- a/advisories/github-reviewed/2021/05/GHSA-434h-p4gx-jm89/GHSA-434h-p4gx-jm89.json
+++ b/advisories/github-reviewed/2021/05/GHSA-434h-p4gx-jm89/GHSA-434h-p4gx-jm89.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-434h-p4gx-jm89",
-  "modified": "2021-08-31T21:20:11Z",
+  "modified": "2024-09-20T17:16:16Z",
   "published": "2021-05-27T18:38:36Z",
   "aliases": [
     "CVE-2021-29621"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -52,6 +56,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/dpgaspar/Flask-AppBuilder"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/flask-appbuilder/PYSEC-2021-90.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread.html/r466759f377651f0a690475d5a52564d0e786e82c08d5a5730a4f8352@%3Cannounce.apache.org%3E"