From e17ec342c6f98d04a0a6a7248ca43814fee3a9ae Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 21 May 2024 18:22:05 +0000
Subject: [PATCH] Publish Advisories

GHSA-7mp6-929p-pqhj
GHSA-8c8w-f7wp-2jr2
---
 .../GHSA-7mp6-929p-pqhj/GHSA-7mp6-929p-pqhj.json   | 14 +++++++++++---
 .../GHSA-8c8w-f7wp-2jr2/GHSA-8c8w-f7wp-2jr2.json   | 14 +++++++++++---
 2 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2023/09/GHSA-7mp6-929p-pqhj/GHSA-7mp6-929p-pqhj.json b/advisories/github-reviewed/2023/09/GHSA-7mp6-929p-pqhj/GHSA-7mp6-929p-pqhj.json
index ff75512ff59..3b56208cf50 100644
--- a/advisories/github-reviewed/2023/09/GHSA-7mp6-929p-pqhj/GHSA-7mp6-929p-pqhj.json
+++ b/advisories/github-reviewed/2023/09/GHSA-7mp6-929p-pqhj/GHSA-7mp6-929p-pqhj.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7mp6-929p-pqhj",
-  "modified": "2023-09-22T19:50:17Z",
+  "modified": "2024-05-21T18:20:28Z",
   "published": "2023-09-20T06:30:50Z",
   "aliases": [
     "CVE-2023-43618"
   ],
   "summary": "Croc requires senders to provide local IP addresses in cleartext",
-  "details": "An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an `ips?` message.",
+  "details": "An issue was discovered in Croc before 9.6.16. The protocol requires a sender to provide its local IP addresses in cleartext via an `ips?` message.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -28,7 +28,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "9.6.5"
+              "fixed": "9.6.16"
             }
           ]
         }
@@ -44,6 +44,14 @@
       "type": "WEB",
       "url": "https://github.com/schollz/croc/issues/597"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/schollz/croc/pull/700"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/schollz/croc/commit/6f5f16aa1c16b1ec6f31fec35be15de466d9701b"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/schollz/croc"
diff --git a/advisories/github-reviewed/2023/09/GHSA-8c8w-f7wp-2jr2/GHSA-8c8w-f7wp-2jr2.json b/advisories/github-reviewed/2023/09/GHSA-8c8w-f7wp-2jr2/GHSA-8c8w-f7wp-2jr2.json
index 1db6167acb5..530f64c9186 100644
--- a/advisories/github-reviewed/2023/09/GHSA-8c8w-f7wp-2jr2/GHSA-8c8w-f7wp-2jr2.json
+++ b/advisories/github-reviewed/2023/09/GHSA-8c8w-f7wp-2jr2/GHSA-8c8w-f7wp-2jr2.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8c8w-f7wp-2jr2",
-  "modified": "2023-09-21T17:00:17Z",
+  "modified": "2024-05-21T18:21:29Z",
   "published": "2023-09-20T06:30:50Z",
   "aliases": [
     "CVE-2023-43616"
   ],
   "summary": "Sender can cause a receiver to overwrite files during ZIP extraction in Croc",
-  "details": "An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.",
+  "details": "An issue was discovered in Croc before 9.6.16. A sender can cause a receiver to overwrite files during ZIP extraction.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -28,7 +28,7 @@
               "introduced": "0"
             },
             {
-              "last_affected": "9.6.5"
+              "fixed": "9.6.16"
             }
           ]
         }
@@ -44,6 +44,14 @@
       "type": "WEB",
       "url": "https://github.com/schollz/croc/issues/594"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/schollz/croc/pull/698"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/schollz/croc/commit/4929635eb875d2304e9415b8f4aa62af9e1a2339"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/schollz/croc"