Publish Advisories

GHSA-fr28-569j-53c4
GHSA-fvgf-6h6h-3322
GHSA-2hrw-hx67-34x6
GHSA-q2jf-h9jm-m7p4
This commit is contained in:
advisory-database[bot]
2024-09-20 15:41:55 +00:00
parent e6deadc0bb
commit df5dab490b
4 changed files with 64 additions and 16 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fr28-569j-53c4",
"modified": "2024-03-07T23:23:28Z",
"modified": "2024-09-20T15:37:24Z",
"published": "2021-03-18T20:30:01Z",
"aliases": [
"CVE-2020-24584"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -37,7 +41,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -56,7 +60,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -134,10 +138,18 @@
"type": "WEB",
"url": "https://groups.google.com/forum/#!topic/django-announce/Gdqn58RqIDM"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2020-34.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-fr28-569j-53c4"
},
{
"type": "WEB",
"url": "https://docs.djangoproject.com/en/dev/releases/security"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fvgf-6h6h-3322",
"modified": "2023-09-05T14:35:06Z",
"modified": "2024-09-20T15:36:33Z",
"published": "2021-03-18T20:29:49Z",
"aliases": [
"CVE-2021-3281"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -37,7 +41,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -56,7 +60,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -102,6 +106,18 @@
"type": "WEB",
"url": "https://docs.djangoproject.com/en/3.1/releases/security"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-fvgf-6h6h-3322"
},
{
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-9.yaml"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!forum/django-announce"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hrw-hx67-34x6",
"modified": "2024-04-03T14:58:08Z",
"modified": "2024-09-20T15:41:23Z",
"published": "2023-02-15T03:30:47Z",
"aliases": [
"CVE-2023-24580"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -25,7 +29,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.2"
"introduced": "3.2a1"
},
{
"fixed": "3.2.18"
@@ -44,7 +48,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.1"
"introduced": "4.1a1"
},
{
"fixed": "4.1.7"
@@ -63,7 +67,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.0"
"introduced": "4.0a1"
},
{
"fixed": "4.0.10"
@@ -98,6 +102,10 @@
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2023-13.yaml"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!forum/django-announce"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q2jf-h9jm-m7p4",
"modified": "2024-05-08T17:46:22Z",
"modified": "2024-09-20T15:40:25Z",
"published": "2023-02-01T21:30:23Z",
"aliases": [
"CVE-2023-23969"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -37,7 +41,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -56,7 +60,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "django"
"name": "Django"
},
"ranges": [
{
@@ -94,6 +98,14 @@
"type": "WEB",
"url": "https://docs.djangoproject.com/en/4.1/releases/security"
},
{
"type": "PACKAGE",
"url": "https://github.com/django/django"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2023-12.yaml"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/#!forum/django-announce"