diff --git a/advisories/github-reviewed/2017/10/GHSA-33pp-3763-mrfp/GHSA-33pp-3763-mrfp.json b/advisories/github-reviewed/2017/10/GHSA-33pp-3763-mrfp/GHSA-33pp-3763-mrfp.json index 617fe19cd79..cbef24c22d8 100644 --- a/advisories/github-reviewed/2017/10/GHSA-33pp-3763-mrfp/GHSA-33pp-3763-mrfp.json +++ b/advisories/github-reviewed/2017/10/GHSA-33pp-3763-mrfp/GHSA-33pp-3763-mrfp.json @@ -1,7 +1,7 @@ { "schema_version": "1.3.0", "id": "GHSA-33pp-3763-mrfp", - "modified": "2023-01-23T20:31:54Z", + "modified": "2023-03-01T18:54:54Z", "published": "2017-10-24T18:33:36Z", "aliases": [ "CVE-2014-7819" @@ -246,6 +246,22 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7819" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHBA-2015:1100" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2014-7819" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1161527" + }, + { + "type": "WEB", + "url": "https://groups.google.com/forum/#!topic/rubyonrails-security/doAVp0YaTqY" + }, { "type": "WEB", "url": "https://groups.google.com/forum/message/raw?msg=rubyonrails-security/doAVp0YaTqY/aHFngBqNBoAJ" @@ -278,6 +294,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T20:53:55Z", - "nvd_published_at": null + "nvd_published_at": "2014-11-08T11:55:00Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json b/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json index 9b76a48f632..7a66319b79d 100644 --- a/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json +++ b/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json @@ -1,7 +1,7 @@ { "schema_version": "1.3.0", "id": "GHSA-px3r-jm9g-c8w8", - "modified": "2023-01-23T21:31:25Z", + "modified": "2023-03-01T18:54:07Z", "published": "2018-04-26T15:41:10Z", "aliases": [ "CVE-2018-3741" @@ -9,7 +9,10 @@ "summary": "rails-html-sanitizer Cross-site Scripting vulnerability", "details": "There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { @@ -53,6 +56,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:50:14Z", - "nvd_published_at": null + "nvd_published_at": "2018-03-30T19:29:00Z" } } \ No newline at end of file