Publish Advisories

GHSA-h36j-8vv3-cj52
GHSA-x757-hv69-jr45

advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h36j-8vv3-cj52",
-  "modified": "2025-03-20T12:32:46Z",
+  "modified": "2025-03-21T21:16:01Z",
   "published": "2025-03-20T12:32:46Z",
   "aliases": [
     "CVE-2024-7776"
   ],
+  "summary": "Open Neural Network Exchange (ONNX) Path Traversal Vulnerability",
   "details": "A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.",
   "severity": [
     {
@@ -13,12 +14,44 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "onnx"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.17.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7776"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/onnx/onnx/pull/6222"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/onnx/onnx"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63"
@@ -29,8 +62,8 @@
       "CWE-22"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T21:16:01Z",
     "nvd_published_at": "2025-03-20T10:15:37Z"
   }
 }

advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x757-hv69-jr45",
-  "modified": "2025-03-20T12:32:46Z",
+  "modified": "2025-03-21T21:16:29Z",
   "published": "2025-03-20T12:32:46Z",
   "aliases": [
     "CVE-2024-7959"
   ],
+  "summary": "Open WebUI has SSRF in /openai/models",
   "details": "The `/openai/models` endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.",
   "severity": [
     {
@@ -13,12 +14,36 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "open-webui"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.3.8"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7959"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/open-webui/open-webui"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/3c8bea0a-d678-4d67-bb9c-2b5b610a2193"
@@ -29,8 +54,8 @@
       "CWE-918"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T21:16:29Z",
     "nvd_published_at": "2025-03-20T10:15:38Z"
   }
 }