diff --git a/advisories/github-reviewed/2022/05/GHSA-9jcv-v4jp-w3cq/GHSA-9jcv-v4jp-w3cq.json b/advisories/github-reviewed/2022/05/GHSA-9jcv-v4jp-w3cq/GHSA-9jcv-v4jp-w3cq.json index cef4c36e5c0..f535d912437 100644 --- a/advisories/github-reviewed/2022/05/GHSA-9jcv-v4jp-w3cq/GHSA-9jcv-v4jp-w3cq.json +++ b/advisories/github-reviewed/2022/05/GHSA-9jcv-v4jp-w3cq/GHSA-9jcv-v4jp-w3cq.json @@ -25,14 +25,39 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "2.108" }, { - "fixed": "2.115" + "fixed": "2.116" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.115" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.107.2" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.107.1" + } } ], "references": [ @@ -40,6 +65,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000170" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/jenkins/commit/07d18cfd6d336a2b7cc0a78e120d9739a5d4e1d1" + }, { "type": "WEB", "url": "https://jenkins.io/security/advisory/2018-04-11/#SECURITY-759"