From e49414467bf149d398725d15d8f897325954754d Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 21 Oct 2024 21:04:32 +0000 Subject: [PATCH] Publish Advisories GHSA-qfc5-mcwq-26q8 GHSA-cmc7-mfmr-xqrx GHSA-hj5v-574p-mj7c GHSA-8cw2-jv5c-c825 GHSA-pg2w-x9wp-vw92 --- .../GHSA-qfc5-mcwq-26q8.json | 18 +++++++++++++++++- .../GHSA-cmc7-mfmr-xqrx.json | 18 +++++++++++++++++- .../GHSA-hj5v-574p-mj7c.json | 14 +++++++++++++- .../GHSA-8cw2-jv5c-c825.json | 10 +++++++++- .../GHSA-pg2w-x9wp-vw92.json | 10 +++++++++- 5 files changed, 65 insertions(+), 5 deletions(-) diff --git a/advisories/github-reviewed/2020/03/GHSA-qfc5-mcwq-26q8/GHSA-qfc5-mcwq-26q8.json b/advisories/github-reviewed/2020/03/GHSA-qfc5-mcwq-26q8/GHSA-qfc5-mcwq-26q8.json index 0b86e46d7fc..7e62f30fb49 100644 --- a/advisories/github-reviewed/2020/03/GHSA-qfc5-mcwq-26q8/GHSA-qfc5-mcwq-26q8.json +++ b/advisories/github-reviewed/2020/03/GHSA-qfc5-mcwq-26q8/GHSA-qfc5-mcwq-26q8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qfc5-mcwq-26q8", - "modified": "2021-08-19T22:13:44Z", + "modified": "2024-10-21T21:03:36Z", "published": "2020-03-12T17:02:50Z", "aliases": [ "CVE-2019-18874" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -51,10 +55,22 @@ "type": "WEB", "url": "https://github.com/giampaolo/psutil/commit/7d512c8e4442a896d56505be3e78f1156f443465" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-qfc5-mcwq-26q8" + }, + { + "type": "PACKAGE", + "url": "https://github.com/giampaolo/psutil" + }, { "type": "WEB", "url": "https://github.com/giampaolo/psutil/blob/master/HISTORY.rst#566" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/psutil/PYSEC-2019-41.yaml" + }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2019/11/msg00018.html" diff --git a/advisories/github-reviewed/2021/04/GHSA-cmc7-mfmr-xqrx/GHSA-cmc7-mfmr-xqrx.json b/advisories/github-reviewed/2021/04/GHSA-cmc7-mfmr-xqrx/GHSA-cmc7-mfmr-xqrx.json index da6bafb26f0..fa7670da58a 100644 --- a/advisories/github-reviewed/2021/04/GHSA-cmc7-mfmr-xqrx/GHSA-cmc7-mfmr-xqrx.json +++ b/advisories/github-reviewed/2021/04/GHSA-cmc7-mfmr-xqrx/GHSA-cmc7-mfmr-xqrx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cmc7-mfmr-xqrx", - "modified": "2024-02-23T21:02:48Z", + "modified": "2024-10-21T21:02:47Z", "published": "2021-04-07T21:01:25Z", "aliases": [ "CVE-2021-3116" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -44,6 +48,10 @@ "type": "WEB", "url": "https://github.com/abhinavsingh/proxy.py/pull/482" }, + { + "type": "WEB", + "url": "https://github.com/abhinavsingh/proxy.py/pull/482/commits/9b00093288237f5073c403f2c4f62acfdfa8ed46" + }, { "type": "WEB", "url": "https://github.com/abhinavsingh/proxy.py/commit/bff171ec26d826ae1d22d2466eaf9d8bdbf059d3" @@ -52,6 +60,14 @@ "type": "WEB", "url": "https://cardaci.xyz/advisories/2021/01/10/proxy.py-2.3.0-broken-basic-authentication" }, + { + "type": "PACKAGE", + "url": "https://github.com/abhinavsingh/proxy.py" + }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-cmc7-mfmr-xqrx" + }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/proxy-py/PYSEC-2021-46.yaml" diff --git a/advisories/github-reviewed/2021/04/GHSA-hj5v-574p-mj7c/GHSA-hj5v-574p-mj7c.json b/advisories/github-reviewed/2021/04/GHSA-hj5v-574p-mj7c/GHSA-hj5v-574p-mj7c.json index f76e2a57713..6a6884c09ec 100644 --- a/advisories/github-reviewed/2021/04/GHSA-hj5v-574p-mj7c/GHSA-hj5v-574p-mj7c.json +++ b/advisories/github-reviewed/2021/04/GHSA-hj5v-574p-mj7c/GHSA-hj5v-574p-mj7c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hj5v-574p-mj7c", - "modified": "2023-08-07T13:05:28Z", + "modified": "2024-10-21T21:03:12Z", "published": "2021-04-20T16:39:57Z", "aliases": [ "CVE-2020-29651" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -52,6 +56,14 @@ "type": "WEB", "url": "https://github.com/pytest-dev/py/pull/257/commits/4a9017dc6199d2a564b6e4b0aa39d6d8870e4144" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-hj5v-574p-mj7c" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/py/PYSEC-2020-92.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/pytest-dev/py" diff --git a/advisories/github-reviewed/2022/05/GHSA-8cw2-jv5c-c825/GHSA-8cw2-jv5c-c825.json b/advisories/github-reviewed/2022/05/GHSA-8cw2-jv5c-c825/GHSA-8cw2-jv5c-c825.json index 343d0166075..853d29cbae9 100644 --- a/advisories/github-reviewed/2022/05/GHSA-8cw2-jv5c-c825/GHSA-8cw2-jv5c-c825.json +++ b/advisories/github-reviewed/2022/05/GHSA-8cw2-jv5c-c825/GHSA-8cw2-jv5c-c825.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8cw2-jv5c-c825", - "modified": "2023-01-23T20:13:04Z", + "modified": "2024-10-21T21:04:09Z", "published": "2022-05-24T17:00:40Z", "aliases": [ "CVE-2019-12408" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -59,6 +63,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12408" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pyarrow/PYSEC-2019-195.yaml" + }, { "type": "WEB", "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/red-arrow/CVE-2019-12408.yml" diff --git a/advisories/github-reviewed/2022/05/GHSA-pg2w-x9wp-vw92/GHSA-pg2w-x9wp-vw92.json b/advisories/github-reviewed/2022/05/GHSA-pg2w-x9wp-vw92/GHSA-pg2w-x9wp-vw92.json index 216c3f6ea23..cb3ba2178df 100644 --- a/advisories/github-reviewed/2022/05/GHSA-pg2w-x9wp-vw92/GHSA-pg2w-x9wp-vw92.json +++ b/advisories/github-reviewed/2022/05/GHSA-pg2w-x9wp-vw92/GHSA-pg2w-x9wp-vw92.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pg2w-x9wp-vw92", - "modified": "2023-12-07T21:23:56Z", + "modified": "2024-10-21T21:03:10Z", "published": "2022-05-13T01:11:23Z", "aliases": [ "CVE-2015-2296" @@ -37,6 +37,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2296" }, + { + "type": "WEB", + "url": "https://github.com/kennethreitz/requests/commit/3bd8afbff29e50b38f889b2f688785a669b9aafc" + }, { "type": "WEB", "url": "https://github.com/psf/requests/commit/3bd8afbff29e50b38f889b2f688785a669b9aafc" @@ -45,6 +49,10 @@ "type": "PACKAGE", "url": "https://github.com/psf/requests" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/requests/PYSEC-2015-17.yaml" + }, { "type": "WEB", "url": "https://warehouse.python.org/project/requests/2.6.0"