From df75f360359f212ca826bfff5982676bd2609fe7 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 20 Sep 2024 15:02:52 +0000 Subject: [PATCH] Publish GHSA-vfq6-hq5r-27r6 --- .../GHSA-vfq6-hq5r-27r6.json | 80 +++++++++++-------- 1 file changed, 48 insertions(+), 32 deletions(-) diff --git a/advisories/github-reviewed/2020/01/GHSA-vfq6-hq5r-27r6/GHSA-vfq6-hq5r-27r6.json b/advisories/github-reviewed/2020/01/GHSA-vfq6-hq5r-27r6/GHSA-vfq6-hq5r-27r6.json index 890214aceed..87262459f2b 100644 --- a/advisories/github-reviewed/2020/01/GHSA-vfq6-hq5r-27r6/GHSA-vfq6-hq5r-27r6.json +++ b/advisories/github-reviewed/2020/01/GHSA-vfq6-hq5r-27r6/GHSA-vfq6-hq5r-27r6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vfq6-hq5r-27r6", - "modified": "2023-09-05T13:59:29Z", + "modified": "2024-09-20T15:01:08Z", "published": "2020-01-16T22:35:12Z", "aliases": [ "CVE-2019-19844" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { @@ -37,14 +41,14 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "2.0.0" + "introduced": "2.0" }, { "fixed": "2.2.9" @@ -56,14 +60,14 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "3.0.0" + "introduced": "3.0" }, { "fixed": "3.0.1" @@ -94,33 +98,9 @@ "type": "WEB", "url": "https://github.com/django/django/commit/f4cff43bf921fcea6a29b726eb66767f67753fa2" }, - { - "type": "PACKAGE", - "url": "https://github.com/django/django" - }, { "type": "WEB", - "url": "https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a0" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD" - }, - { - "type": "WEB", - "url": "https://seclists.org/bugtraq/2020/Jan/9" - }, - { - "type": "WEB", - "url": "https://security.gentoo.org/glsa/202004-17" - }, - { - "type": "WEB", - "url": "https://security.netapp.com/advisory/ntap-20200110-0003" - }, - { - "type": "WEB", - "url": "https://usn.ubuntu.com/4224-1" + "url": "https://www.djangoproject.com/weblog/2019/dec/18/security-releases" }, { "type": "WEB", @@ -128,7 +108,43 @@ }, { "type": "WEB", - "url": "https://www.djangoproject.com/weblog/2019/dec/18/security-releases" + "url": "https://usn.ubuntu.com/4224-1" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20200110-0003" + }, + { + "type": "WEB", + "url": "https://security.gentoo.org/glsa/202004-17" + }, + { + "type": "WEB", + "url": "https://seclists.org/bugtraq/2020/Jan/9" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCM2DPUI7TOZWN4A6JFQFUVQ2XGE7GUD" + }, + { + "type": "WEB", + "url": "https://groups.google.com/forum/#!topic/django-announce/3oaB2rVH3a0" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-16.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/django/django" + }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-vfq6-hq5r-27r6" + }, + { + "type": "WEB", + "url": "https://docs.djangoproject.com/en/dev/releases/security" }, { "type": "WEB",