From cef8779c8110debe889422e08445ef17fdb5cda2 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 13 Sep 2023 20:27:43 +0000
Subject: [PATCH] Publish Advisories

GHSA-pq5x-rprq-8jrj
GHSA-hpw4-m59j-9p52
---
 .../GHSA-pq5x-rprq-8jrj/GHSA-pq5x-rprq-8jrj.json   | 14 +++++++++++---
 .../GHSA-hpw4-m59j-9p52/GHSA-hpw4-m59j-9p52.json   | 14 +++++++++++---
 2 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2018/07/GHSA-pq5x-rprq-8jrj/GHSA-pq5x-rprq-8jrj.json b/advisories/github-reviewed/2018/07/GHSA-pq5x-rprq-8jrj/GHSA-pq5x-rprq-8jrj.json
index 3dfb1c9e597..78e9a5b6b4a 100644
--- a/advisories/github-reviewed/2018/07/GHSA-pq5x-rprq-8jrj/GHSA-pq5x-rprq-8jrj.json
+++ b/advisories/github-reviewed/2018/07/GHSA-pq5x-rprq-8jrj/GHSA-pq5x-rprq-8jrj.json
@@ -1,15 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pq5x-rprq-8jrj",
-  "modified": "2020-08-31T18:24:41Z",
+  "modified": "2023-09-13T20:26:39Z",
   "published": "2018-07-23T22:06:14Z",
   "aliases": [
     "CVE-2017-16130"
   ],
   "summary": "Directory Traversal in exxxxxxxxxxx",
-  "details": "Affected versions of `exxxxxxxxxxx` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nThis vulnerability is only effective for files that have a file extension, which provides a partial mitigation. \n\nExample request:\n```\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
+  "details": "Affected versions of `exxxxxxxxxxx` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nThis vulnerability is only effective for files that have a file extension, which provides a partial mitigation. \n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
     {
@@ -17,6 +20,11 @@
         "ecosystem": "npm",
         "name": "exxxxxxxxxxx"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
diff --git a/advisories/github-reviewed/2020/09/GHSA-hpw4-m59j-9p52/GHSA-hpw4-m59j-9p52.json b/advisories/github-reviewed/2020/09/GHSA-hpw4-m59j-9p52/GHSA-hpw4-m59j-9p52.json
index e4c5b5c26f3..3757e77f062 100644
--- a/advisories/github-reviewed/2020/09/GHSA-hpw4-m59j-9p52/GHSA-hpw4-m59j-9p52.json
+++ b/advisories/github-reviewed/2020/09/GHSA-hpw4-m59j-9p52/GHSA-hpw4-m59j-9p52.json
@@ -1,15 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hpw4-m59j-9p52",
-  "modified": "2020-08-31T18:21:43Z",
+  "modified": "2023-09-13T20:25:57Z",
   "published": "2020-09-01T17:29:13Z",
   "aliases": [
     "CVE-2017-16163"
   ],
   "summary": "Directory Traversal in dylmomo",
-  "details": "Affected versions of `dylmomo` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nExample request:\n```\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
+  "details": "Affected versions of `dylmomo` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
     {
@@ -17,6 +20,11 @@
         "ecosystem": "npm",
         "name": "dylmomo"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",