From d090aebe00909c8cff0dbba3d25c4431ded12e33 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 24 Sep 2024 20:43:58 +0000
Subject: [PATCH] Publish Advisories

GHSA-v7m9-9497-p9gr
GHSA-8fm8-7365-5rh2
GHSA-j7c2-rqm3-c97m
GHSA-wg33-x934-3ghh
---
 .../GHSA-v7m9-9497-p9gr/GHSA-v7m9-9497-p9gr.json   | 14 +++++++++++---
 .../GHSA-8fm8-7365-5rh2/GHSA-8fm8-7365-5rh2.json   | 10 +++++++++-
 .../GHSA-j7c2-rqm3-c97m/GHSA-j7c2-rqm3-c97m.json   | 10 +++++++++-
 .../GHSA-wg33-x934-3ghh/GHSA-wg33-x934-3ghh.json   | 14 +++++++++++++-
 4 files changed, 42 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2020/07/GHSA-v7m9-9497-p9gr/GHSA-v7m9-9497-p9gr.json b/advisories/github-reviewed/2020/07/GHSA-v7m9-9497-p9gr/GHSA-v7m9-9497-p9gr.json
index e79515a0e98..0f422be099e 100644
--- a/advisories/github-reviewed/2020/07/GHSA-v7m9-9497-p9gr/GHSA-v7m9-9497-p9gr.json
+++ b/advisories/github-reviewed/2020/07/GHSA-v7m9-9497-p9gr/GHSA-v7m9-9497-p9gr.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v7m9-9497-p9gr",
-  "modified": "2021-11-19T15:44:01Z",
+  "modified": "2024-09-24T20:43:31Z",
   "published": "2020-07-22T23:07:16Z",
   "aliases": [
     "CVE-2020-15110"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -28,7 +32,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "0.12"
+              "fixed": "0.12.0"
             }
           ]
         }
@@ -54,13 +58,17 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/jupyterhub/kubespawner"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/jupyterhub-kubespawner/PYSEC-2020-51.yaml"
     }
   ],
   "database_specific": {
     "cwe_ids": [
       "CWE-863"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2020-07-17T20:49:37Z",
     "nvd_published_at": "2020-07-17T21:15:00Z"
diff --git a/advisories/github-reviewed/2022/05/GHSA-8fm8-7365-5rh2/GHSA-8fm8-7365-5rh2.json b/advisories/github-reviewed/2022/05/GHSA-8fm8-7365-5rh2/GHSA-8fm8-7365-5rh2.json
index 21096a0f53b..47271bc99a8 100644
--- a/advisories/github-reviewed/2022/05/GHSA-8fm8-7365-5rh2/GHSA-8fm8-7365-5rh2.json
+++ b/advisories/github-reviewed/2022/05/GHSA-8fm8-7365-5rh2/GHSA-8fm8-7365-5rh2.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8fm8-7365-5rh2",
-  "modified": "2024-05-01T16:59:58Z",
+  "modified": "2024-09-24T20:42:47Z",
   "published": "2022-05-14T02:08:52Z",
   "aliases": [
     "CVE-2016-3069"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3069"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2016-27.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://security.gentoo.org/glsa/201612-19"
diff --git a/advisories/github-reviewed/2022/05/GHSA-j7c2-rqm3-c97m/GHSA-j7c2-rqm3-c97m.json b/advisories/github-reviewed/2022/05/GHSA-j7c2-rqm3-c97m/GHSA-j7c2-rqm3-c97m.json
index 422a1dd4128..73c93c2dee2 100644
--- a/advisories/github-reviewed/2022/05/GHSA-j7c2-rqm3-c97m/GHSA-j7c2-rqm3-c97m.json
+++ b/advisories/github-reviewed/2022/05/GHSA-j7c2-rqm3-c97m/GHSA-j7c2-rqm3-c97m.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j7c2-rqm3-c97m",
-  "modified": "2024-05-01T16:53:44Z",
+  "modified": "2024-09-24T20:41:59Z",
   "published": "2022-05-14T02:08:47Z",
   "aliases": [
     "CVE-2016-3068"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3068"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2016-26.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://security.gentoo.org/glsa/201612-19"
diff --git a/advisories/github-reviewed/2022/05/GHSA-wg33-x934-3ghh/GHSA-wg33-x934-3ghh.json b/advisories/github-reviewed/2022/05/GHSA-wg33-x934-3ghh/GHSA-wg33-x934-3ghh.json
index 862058daa5e..8e56d0fd201 100644
--- a/advisories/github-reviewed/2022/05/GHSA-wg33-x934-3ghh/GHSA-wg33-x934-3ghh.json
+++ b/advisories/github-reviewed/2022/05/GHSA-wg33-x934-3ghh/GHSA-wg33-x934-3ghh.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wg33-x934-3ghh",
-  "modified": "2024-04-29T16:19:35Z",
+  "modified": "2024-09-24T20:42:15Z",
   "published": "2022-05-17T03:39:31Z",
   "aliases": [
     "CVE-2016-6298"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -60,9 +64,17 @@
       "type": "WEB",
       "url": "https://github.com/latchset/jwcrypto/releases/tag/v0.3.2"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/jwcrypto/PYSEC-2016-4.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://web.archive.org/web/20200227230613/http://www.securityfocus.com/bid/92729"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.securityfocus.com/bid/92729"
     }
   ],
   "database_specific": {