From d02a04a734a9ba5e3584c91efc64684add9ad4be Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 18 Feb 2025 22:49:46 +0000
Subject: [PATCH] Publish Advisories

GHSA-xc93-587g-mxm7
GHSA-6c5p-j8vq-pqhj
---
 .../2023/03/GHSA-xc93-587g-mxm7/GHSA-xc93-587g-mxm7.json  | 4 +++-
 .../2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json  | 8 ++++++--
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/advisories/github-reviewed/2023/03/GHSA-xc93-587g-mxm7/GHSA-xc93-587g-mxm7.json b/advisories/github-reviewed/2023/03/GHSA-xc93-587g-mxm7/GHSA-xc93-587g-mxm7.json
index 566eb5ae2e3..72a9019d60b 100644
--- a/advisories/github-reviewed/2023/03/GHSA-xc93-587g-mxm7/GHSA-xc93-587g-mxm7.json
+++ b/advisories/github-reviewed/2023/03/GHSA-xc93-587g-mxm7/GHSA-xc93-587g-mxm7.json
@@ -50,7 +50,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-502"
+    ],
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2023-04-10T16:38:33Z",
diff --git a/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json b/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json
index ff4a14dca1b..98edcdc973a 100644
--- a/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json
+++ b/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6c5p-j8vq-pqhj",
-  "modified": "2024-11-18T16:26:40Z",
+  "modified": "2025-02-18T22:48:15Z",
   "published": "2024-04-26T00:30:35Z",
   "aliases": [
     "CVE-2024-33663"
@@ -32,7 +32,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "3.3.0"
+              "fixed": "3.4.0"
             }
           ]
         }
@@ -52,6 +52,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/mpdavis/python-jose"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-jose/PYSEC-2024-232.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663"