Publish Advisories

GHSA-xc93-587g-mxm7
GHSA-6c5p-j8vq-pqhj

advisories/github-reviewed/2023/03/GHSA-xc93-587g-mxm7/GHSA-xc93-587g-mxm7.json

@@ -50,7 +50,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-502"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2023-04-10T16:38:33Z",

advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6c5p-j8vq-pqhj",
-  "modified": "2024-11-18T16:26:40Z",
+  "modified": "2025-02-18T22:48:15Z",
   "published": "2024-04-26T00:30:35Z",
   "aliases": [
     "CVE-2024-33663"
@@ -32,7 +32,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "3.3.0"
+              "fixed": "3.4.0"
             }
           ]
         }
@@ -52,6 +52,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/mpdavis/python-jose"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-jose/PYSEC-2024-232.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663"