From e15bb4fd6280b02a5cbcb537a012e653b8a13fc1 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 20 Sep 2024 16:06:36 +0000 Subject: [PATCH] Publish Advisories GHSA-53qw-q765-4fww GHSA-qmf9-6jqf-j8fq --- .../GHSA-53qw-q765-4fww.json | 20 +++++++++++++++---- .../GHSA-qmf9-6jqf-j8fq.json | 12 +++++++---- 2 files changed, 24 insertions(+), 8 deletions(-) diff --git a/advisories/github-reviewed/2022/01/GHSA-53qw-q765-4fww/GHSA-53qw-q765-4fww.json b/advisories/github-reviewed/2022/01/GHSA-53qw-q765-4fww/GHSA-53qw-q765-4fww.json index 3303d8a94c1..b5735326f8f 100644 --- a/advisories/github-reviewed/2022/01/GHSA-53qw-q765-4fww/GHSA-53qw-q765-4fww.json +++ b/advisories/github-reviewed/2022/01/GHSA-53qw-q765-4fww/GHSA-53qw-q765-4fww.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-53qw-q765-4fww", - "modified": "2024-03-07T23:29:13Z", + "modified": "2024-09-20T16:04:22Z", "published": "2022-01-12T19:20:53Z", "aliases": [ "CVE-2021-45115" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -25,7 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.2.0" + "introduced": "2.2a1" }, { "fixed": "2.2.26" @@ -44,7 +48,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "3.2.0" + "introduced": "3.2a1" }, { "fixed": "3.2.11" @@ -63,7 +67,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "4.0.0" + "introduced": "4.0a1" }, { "fixed": "4.0.1" @@ -94,10 +98,18 @@ "type": "WEB", "url": "https://docs.djangoproject.com/en/4.0/releases/security" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-53qw-q765-4fww" + }, { "type": "PACKAGE", "url": "https://github.com/django/django" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-1.yaml" + }, { "type": "WEB", "url": "https://groups.google.com/forum/#!forum/django-announce" diff --git a/advisories/github-reviewed/2023/11/GHSA-qmf9-6jqf-j8fq/GHSA-qmf9-6jqf-j8fq.json b/advisories/github-reviewed/2023/11/GHSA-qmf9-6jqf-j8fq/GHSA-qmf9-6jqf-j8fq.json index 5e62c72a7e2..422f6e781ef 100644 --- a/advisories/github-reviewed/2023/11/GHSA-qmf9-6jqf-j8fq/GHSA-qmf9-6jqf-j8fq.json +++ b/advisories/github-reviewed/2023/11/GHSA-qmf9-6jqf-j8fq/GHSA-qmf9-6jqf-j8fq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qmf9-6jqf-j8fq", - "modified": "2024-04-03T15:32:06Z", + "modified": "2024-09-20T16:05:09Z", "published": "2023-11-02T06:30:25Z", "aliases": [ "CVE-2023-46695" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -25,7 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "3.2" + "introduced": "3.2a1" }, { "fixed": "3.2.23" @@ -44,7 +48,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "4.1" + "introduced": "4.1a1" }, { "fixed": "4.1.13" @@ -63,7 +67,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "4.2" + "introduced": "4.2a1" }, { "fixed": "4.2.7"