diff --git a/advisories/github-reviewed/2021/10/GHSA-4365-fhm5-qcrx/GHSA-4365-fhm5-qcrx.json b/advisories/github-reviewed/2021/10/GHSA-4365-fhm5-qcrx/GHSA-4365-fhm5-qcrx.json index d5eb3728dc4..4ad90f2b693 100644 --- a/advisories/github-reviewed/2021/10/GHSA-4365-fhm5-qcrx/GHSA-4365-fhm5-qcrx.json +++ b/advisories/github-reviewed/2021/10/GHSA-4365-fhm5-qcrx/GHSA-4365-fhm5-qcrx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4365-fhm5-qcrx", - "modified": "2021-10-21T20:32:19Z", + "modified": "2024-10-16T20:45:22Z", "published": "2021-10-22T16:19:13Z", "aliases": [ "CVE-2021-41127" @@ -47,6 +47,10 @@ { "type": "PACKAGE", "url": "https://github.com/RasaHQ/rasa" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rasa/PYSEC-2021-381.yaml" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/05/GHSA-gh2c-6m38-c78j/GHSA-gh2c-6m38-c78j.json b/advisories/github-reviewed/2022/05/GHSA-gh2c-6m38-c78j/GHSA-gh2c-6m38-c78j.json index 3d6d82c27f2..adc5d077e2c 100644 --- a/advisories/github-reviewed/2022/05/GHSA-gh2c-6m38-c78j/GHSA-gh2c-6m38-c78j.json +++ b/advisories/github-reviewed/2022/05/GHSA-gh2c-6m38-c78j/GHSA-gh2c-6m38-c78j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gh2c-6m38-c78j", - "modified": "2024-04-29T16:26:08Z", + "modified": "2024-10-16T20:44:42Z", "published": "2022-05-17T03:46:27Z", "aliases": [ "CVE-2013-6444" @@ -9,7 +9,10 @@ "summary": "PyWBEM TOCTOU vulnerability in certificate validation", "details": "PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.", "severity": [ - + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -45,6 +48,10 @@ "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1044246" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pywbem/PYSEC-2014-94.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/pywbem/pywbem"