diff --git a/advisories/unreviewed/2025/02/GHSA-9f57-9rhg-4hvm/GHSA-9f57-9rhg-4hvm.json b/advisories/github-reviewed/2025/02/GHSA-9f57-9rhg-4hvm/GHSA-9f57-9rhg-4hvm.json similarity index 58% rename from advisories/unreviewed/2025/02/GHSA-9f57-9rhg-4hvm/GHSA-9f57-9rhg-4hvm.json rename to advisories/github-reviewed/2025/02/GHSA-9f57-9rhg-4hvm/GHSA-9f57-9rhg-4hvm.json index ddeb503e9d0..efc7b9f1f0e 100644 --- a/advisories/unreviewed/2025/02/GHSA-9f57-9rhg-4hvm/GHSA-9f57-9rhg-4hvm.json +++ b/advisories/github-reviewed/2025/02/GHSA-9f57-9rhg-4hvm/GHSA-9f57-9rhg-4hvm.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-9f57-9rhg-4hvm", - "modified": "2025-02-20T03:32:03Z", + "modified": "2025-02-20T20:18:50Z", "published": "2025-02-20T03:32:03Z", "aliases": [ "CVE-2025-23020" ], + "summary": "Kwik hash collision vulnerability", "details": "An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).", "severity": [ { @@ -13,16 +14,44 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "tech.kwik:kwik" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.10.1" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23020" }, + { + "type": "WEB", + "url": "https://github.com/ptrd/kwik/commit/b0733d72bad76bc5d8df2f4a7792ebb2539ebdc8" + }, { "type": "WEB", "url": "https://github.com/ncc-pbottine/QUIC-Hash-Dos-Advisory" }, + { + "type": "PACKAGE", + "url": "https://github.com/ptrd/kwik" + }, { "type": "WEB", "url": "https://github.com/ptrd/kwik/releases/tag/v0.10.1" @@ -33,8 +62,8 @@ "CWE-407" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-02-20T20:18:50Z", "nvd_published_at": "2025-02-20T03:15:12Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-9gff-5v8w-x922/GHSA-9gff-5v8w-x922.json b/advisories/github-reviewed/2025/02/GHSA-9gff-5v8w-x922/GHSA-9gff-5v8w-x922.json similarity index 63% rename from advisories/unreviewed/2025/02/GHSA-9gff-5v8w-x922/GHSA-9gff-5v8w-x922.json rename to advisories/github-reviewed/2025/02/GHSA-9gff-5v8w-x922/GHSA-9gff-5v8w-x922.json index 86518ba72c8..906db91d76f 100644 --- a/advisories/unreviewed/2025/02/GHSA-9gff-5v8w-x922/GHSA-9gff-5v8w-x922.json +++ b/advisories/github-reviewed/2025/02/GHSA-9gff-5v8w-x922/GHSA-9gff-5v8w-x922.json @@ -1,19 +1,40 @@ { "schema_version": "1.4.0", "id": "GHSA-9gff-5v8w-x922", - "modified": "2025-02-20T12:31:15Z", + "modified": "2025-02-20T20:18:36Z", "published": "2025-02-20T12:31:15Z", "aliases": [ "CVE-2025-0868" ], + "summary": "DocsGPT Allows Remote Code Execution", "details": "A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.\n\nThis issue affects DocsGPT: from 0.8.1 through 0.12.0.", "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "docsgpt" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0.8.1" + }, + { + "last_affected": "0.12.0" + } + ] + } + ] } ], - "affected": [], "references": [ { "type": "ADVISORY", @@ -30,6 +51,10 @@ { "type": "WEB", "url": "https://github.com/arc53/DocsGPT" + }, + { + "type": "PACKAGE", + "url": "https://github.com/arc53/docsgpt" } ], "database_specific": { @@ -37,8 +62,8 @@ "CWE-77" ], "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-02-20T20:18:36Z", "nvd_published_at": "2025-02-20T12:15:10Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-q4xq-445g-g6ch/GHSA-q4xq-445g-g6ch.json b/advisories/github-reviewed/2025/02/GHSA-q4xq-445g-g6ch/GHSA-q4xq-445g-g6ch.json similarity index 59% rename from advisories/unreviewed/2025/02/GHSA-q4xq-445g-g6ch/GHSA-q4xq-445g-g6ch.json rename to advisories/github-reviewed/2025/02/GHSA-q4xq-445g-g6ch/GHSA-q4xq-445g-g6ch.json index dabca058f1d..3ea68e6aee2 100644 --- a/advisories/unreviewed/2025/02/GHSA-q4xq-445g-g6ch/GHSA-q4xq-445g-g6ch.json +++ b/advisories/github-reviewed/2025/02/GHSA-q4xq-445g-g6ch/GHSA-q4xq-445g-g6ch.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-q4xq-445g-g6ch", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-20T20:19:28Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2024-4028" ], + "summary": "Keycloak allows cross-site scripting (XSS)", "details": "A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.", "severity": [ { @@ -13,7 +14,27 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.keycloak:keycloak-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "26.1.2" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -26,15 +47,20 @@ { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2276418" + }, + { + "type": "PACKAGE", + "url": "https://github.com/keycloak/keycloak" } ], "database_specific": { "cwe_ids": [ - "CWE-20" + "CWE-20", + "CWE-79" ], "severity": "LOW", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-02-20T20:19:28Z", "nvd_published_at": "2025-02-18T18:15:25Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-vxm9-8mfw-vc6g/GHSA-vxm9-8mfw-vc6g.json b/advisories/github-reviewed/2025/02/GHSA-vxm9-8mfw-vc6g/GHSA-vxm9-8mfw-vc6g.json similarity index 55% rename from advisories/unreviewed/2025/02/GHSA-vxm9-8mfw-vc6g/GHSA-vxm9-8mfw-vc6g.json rename to advisories/github-reviewed/2025/02/GHSA-vxm9-8mfw-vc6g/GHSA-vxm9-8mfw-vc6g.json index 27c4153eeb1..c5ac3f9b31c 100644 --- a/advisories/unreviewed/2025/02/GHSA-vxm9-8mfw-vc6g/GHSA-vxm9-8mfw-vc6g.json +++ b/advisories/github-reviewed/2025/02/GHSA-vxm9-8mfw-vc6g/GHSA-vxm9-8mfw-vc6g.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-vxm9-8mfw-vc6g", - "modified": "2025-02-20T03:32:03Z", + "modified": "2025-02-20T20:19:01Z", "published": "2025-02-20T03:32:03Z", "aliases": [ "CVE-2025-1293" ], + "summary": "Hermes improperly validates a JWT", "details": "Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.", "severity": [ { @@ -13,15 +14,43 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/hashicorp-forge/hermes" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.5.0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1293" }, + { + "type": "WEB", + "url": "https://github.com/hashicorp-forge/hermes/commit/e36d479616099bd0c8dfde6786ea671f112d9106" + }, { "type": "WEB", "url": "https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371" + }, + { + "type": "PACKAGE", + "url": "https://github.com/hashicorp-forge/hermes" } ], "database_specific": { @@ -29,8 +58,8 @@ "CWE-1390" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-02-20T20:19:01Z", "nvd_published_at": "2025-02-20T01:15:09Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2025/02/GHSA-x5vx-95h7-rv4p/GHSA-x5vx-95h7-rv4p.json b/advisories/github-reviewed/2025/02/GHSA-x5vx-95h7-rv4p/GHSA-x5vx-95h7-rv4p.json new file mode 100644 index 00000000000..7b321e7c055 --- /dev/null +++ b/advisories/github-reviewed/2025/02/GHSA-x5vx-95h7-rv4p/GHSA-x5vx-95h7-rv4p.json @@ -0,0 +1,92 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x5vx-95h7-rv4p", + "modified": "2025-02-20T20:18:25Z", + "published": "2025-02-20T20:18:25Z", + "aliases": [], + "summary": "Cosmos SDK: Groups module can halt chain when handling a malicious proposal", + "details": "Name: ASA-2025-003: Groups module can halt chain when handling a malicious proposal\nComponent: CosmosSDK\nCriticality: High (Considerable Impact; Likely Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md))\nAffected versions: <= v0.47.15, <= 0.50.11\nAffected users: Validators, Full nodes, Users on chains that utilize the groups module\n\n### Description\n\nAn issue was discovered in the groups module where a malicious proposal would result in a division by zero, and subsequently halt a chain due to the resulting error. Any user that can interact with the groups module can introduce this state.\n\n### Patches\n\nThe new Cosmos SDK release [v0.50.12](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.12) and [v0.47.16](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.16) fix this issue.\n\n### Workarounds\n\nThere are no known workarounds for this issue. It is advised that chains apply the update.\n\n### Timeline\n\n* February 9, 2025, 5:18pm PST: Issue reported to the Cosmos Bug Bounty program\n* February 9, 2025, 8:12am PST: Issue triaged by Amulet on-call, and distributed to Core team\n* February 9, 2025, 12:25pm PST: Core team completes validation of issue\n* February 18, 2025, 8:00am PST / 17:00 CET: Pre-notification delivered\n* February 20, 2025, 8:00am PST / 17:00 CET: Patch made available\n\nThis issue was reported to the Cosmos Bug Bounty Program by [dongsam](https://github.com/dongsam) on HackerOne on February 9, 2025. If you believe you have found a bug in the Interchain Stack or would like to contribute to the program by reporting a bug, please see https://hackerone.com/cosmos.\n\nIf you have questions about Interchain security efforts, please reach out to our official communication channel at [security@interchain.io](mailto:security@interchain.io). For more information about the Interchain Foundation’s engagement with Amulet, and to sign up for security notification emails, please see https://github.com/interchainio/security. \n\nA Github Security Advisory for this issue is available in the Cosmos SDK [repository](https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/cosmos-sdk" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.47.16-ics-lsm" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 0.47.15" + } + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/cosmos-sdk" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0.50.0-alpha.0" + }, + { + "fixed": "0.50.12" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 0.50.11" + } + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-x5vx-95h7-rv4p" + }, + { + "type": "WEB", + "url": "https://github.com/cosmos/cosmos-sdk/commit/0a98b65b24900a0e608866c78f172cf8e4140aea" + }, + { + "type": "PACKAGE", + "url": "https://github.com/cosmos/cosmos-sdk" + }, + { + "type": "WEB", + "url": "https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.16" + }, + { + "type": "WEB", + "url": "https://github.com/cosmos/cosmos-sdk/releases/tag/v0.50.12" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-369" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-02-20T20:18:25Z", + "nvd_published_at": null + } +} \ No newline at end of file