diff --git a/advisories/unreviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json b/advisories/github-reviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json similarity index 55% rename from advisories/unreviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json rename to advisories/github-reviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json index ae2570640de..fe2db225553 100644 --- a/advisories/unreviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json +++ b/advisories/github-reviewed/2023/07/GHSA-jrfm-2h82-xg28/GHSA-jrfm-2h82-xg28.json @@ -1,17 +1,39 @@ { "schema_version": "1.4.0", "id": "GHSA-jrfm-2h82-xg28", - "modified": "2023-07-06T21:30:28Z", + "modified": "2024-04-22T18:55:58Z", "published": "2023-07-06T21:30:28Z", "aliases": [ "CVE-2023-29824" ], + "summary": "Use after free in SciPy", "details": "A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "scipy" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.8.0" + } + ] + } + ] + } ], "references": [ { @@ -30,6 +52,10 @@ "type": "WEB", "url": "https://github.com/scipy/scipy/pull/15013" }, + { + "type": "WEB", + "url": "https://github.com/scipy/scipy/commit/e32fc2329d3dd23298725153c5b2cc7fcd0f14f1" + }, { "type": "WEB", "url": "http://www.square16.org/achievement/cve-2023-29824" @@ -37,11 +63,11 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "CRITICAL", + "github_reviewed": true, + "github_reviewed_at": "2024-04-22T18:55:58Z", "nvd_published_at": "2023-07-06T21:15:09Z" } } \ No newline at end of file