From d0308cb9473b455a6cbd4522811f50e43cb7d2c7 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 21 Mar 2025 21:17:31 +0000
Subject: [PATCH] Publish Advisories

GHSA-h36j-8vv3-cj52
GHSA-x757-hv69-jr45
---
 .../GHSA-h36j-8vv3-cj52.json                  | 41 +++++++++++++++++--
 .../GHSA-x757-hv69-jr45.json                  | 33 +++++++++++++--
 2 files changed, 66 insertions(+), 8 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json (55%)
 rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json (63%)

diff --git a/advisories/unreviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json b/advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json
similarity index 55%
rename from advisories/unreviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json
rename to advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json
index ae2bb06124c..684f46bcea6 100644
--- a/advisories/unreviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json
+++ b/advisories/github-reviewed/2025/03/GHSA-h36j-8vv3-cj52/GHSA-h36j-8vv3-cj52.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h36j-8vv3-cj52",
-  "modified": "2025-03-20T12:32:46Z",
+  "modified": "2025-03-21T21:16:01Z",
   "published": "2025-03-20T12:32:46Z",
   "aliases": [
     "CVE-2024-7776"
   ],
+  "summary": "Open Neural Network Exchange (ONNX) Path Traversal Vulnerability",
   "details": "A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.",
   "severity": [
     {
@@ -13,12 +14,44 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "onnx"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.17.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7776"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/onnx/onnx/pull/6222"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/onnx/onnx"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63"
@@ -29,8 +62,8 @@
       "CWE-22"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T21:16:01Z",
     "nvd_published_at": "2025-03-20T10:15:37Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json b/advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json
similarity index 63%
rename from advisories/unreviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json
rename to advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json
index a29fe9e289c..058a0e48b79 100644
--- a/advisories/unreviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json
+++ b/advisories/github-reviewed/2025/03/GHSA-x757-hv69-jr45/GHSA-x757-hv69-jr45.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x757-hv69-jr45",
-  "modified": "2025-03-20T12:32:46Z",
+  "modified": "2025-03-21T21:16:29Z",
   "published": "2025-03-20T12:32:46Z",
   "aliases": [
     "CVE-2024-7959"
   ],
+  "summary": "Open WebUI has SSRF in /openai/models",
   "details": "The `/openai/models` endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.",
   "severity": [
     {
@@ -13,12 +14,36 @@
       "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
     }
   ],
-  "affected": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "open-webui"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.3.8"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7959"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/open-webui/open-webui"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.com/bounties/3c8bea0a-d678-4d67-bb9c-2b5b610a2193"
@@ -29,8 +54,8 @@
       "CWE-918"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-03-21T21:16:29Z",
     "nvd_published_at": "2025-03-20T10:15:38Z"
   }
 }
\ No newline at end of file