Publish Advisories

GHSA-34h3-8mw4-qw57
GHSA-35w3-6qhc-474v
GHSA-8r5j-gm3j-cx9c

advisories/github-reviewed/2024/03/GHSA-34h3-8mw4-qw57/GHSA-34h3-8mw4-qw57.json

@@ -0,0 +1,68 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-34h3-8mw4-qw57",
+  "modified": "2024-03-29T20:16:22Z",
+  "published": "2024-03-29T20:16:22Z",
+  "aliases": [
+    "CVE-2024-29900"
+  ],
+  "summary": "@electron/packager's build process memory potentially leaked into final executable",
+  "details": "### Impact\nA random segment of ~1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory _could_ contain sensitive information such as environment variables, secrets files, etc.\n\n### Patches\nThis issue is patched in 18.3.1\n\n### Workarounds\nNo workarounds, please update to a patched version of `@electron/packager` immediately if impacated.\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@electron/packager"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "18.3.0"
+            },
+            {
+              "fixed": "18.3.1"
+            }
+          ]
+        }
+      ],
+      "versions": [
+        "18.3.0"
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/electron/packager/security/advisories/GHSA-34h3-8mw4-qw57"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29900"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/electron/packager/commit/d421d4bd3ced889a4143c5c3ab6d95e3be249eee"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/electron/packager"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-402"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-03-29T20:16:22Z",
+    "nvd_published_at": "2024-03-29T16:15:08Z"
+  }
+}

advisories/github-reviewed/2024/03/GHSA-35w3-6qhc-474v/GHSA-35w3-6qhc-474v.json

@@ -0,0 +1,69 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-35w3-6qhc-474v",
+  "modified": "2024-03-29T20:16:00Z",
+  "published": "2024-03-29T20:16:00Z",
+  "aliases": [
+    "CVE-2024-29901"
+  ],
+  "summary": "@workos-inc/authkit-nextjs session replay vulnerability",
+  "details": "### Impact\n\nA user can reuse an expired session by controlling the `x-workos-session` header.\n\n### Patches\n\nPatched in https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@workos-inc/authkit-nextjs"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.4.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/workos/authkit-nextjs/security/advisories/GHSA-35w3-6qhc-474v"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29901"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/workos/authkit-nextjs/commit/6c3f4f3179d66cbb15de3962792083ff3b244a01"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/workos/authkit-nextjs"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-294"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-03-29T20:16:00Z",
+    "nvd_published_at": "2024-03-29T16:15:08Z"
+  }
+}

advisories/github-reviewed/2024/03/GHSA-8r5j-gm3j-cx9c/GHSA-8r5j-gm3j-cx9c.json

@@ -1,17 +1,39 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8r5j-gm3j-cx9c",
-  "modified": "2024-03-29T18:30:42Z",
+  "modified": "2024-03-29T20:15:38Z",
   "published": "2024-03-29T18:30:42Z",
   "aliases": [
     "CVE-2024-29686"
   ],
+  "summary": "Winter CMS Server-Side Template Injection (SSTI) vulnerability",
   "details": "Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "wintercms/winter"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "1.2.3"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -22,6 +44,10 @@
       "type": "WEB",
       "url": "https://forum.ksec.co.uk/t/webapps-winter-cms-1-2-3-server-side-template-injection-ssti-authenticated/2779"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/wintercms/winter"
+    },
     {
       "type": "WEB",
       "url": "https://www.exploit-db.com/exploits/51893"
@@ -29,11 +55,11 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-75"
     ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-03-29T20:15:38Z",
     "nvd_published_at": "2024-03-29T16:15:08Z"
   }
 }