diff --git a/advisories/github-reviewed/2019/08/GHSA-fp5j-3fpf-mhj5/GHSA-fp5j-3fpf-mhj5.json b/advisories/github-reviewed/2019/08/GHSA-fp5j-3fpf-mhj5/GHSA-fp5j-3fpf-mhj5.json index c50698b2010..685eec0fa0c 100644 --- a/advisories/github-reviewed/2019/08/GHSA-fp5j-3fpf-mhj5/GHSA-fp5j-3fpf-mhj5.json +++ b/advisories/github-reviewed/2019/08/GHSA-fp5j-3fpf-mhj5/GHSA-fp5j-3fpf-mhj5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fp5j-3fpf-mhj5", - "modified": "2021-07-27T20:59:48Z", + "modified": "2024-10-24T21:48:36Z", "published": "2019-08-08T15:18:22Z", "aliases": [ "CVE-2019-10099" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -33,6 +37,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "pyspark" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.3" + } + ] + } + ] } ], "references": [ @@ -40,6 +63,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10099" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pyspark/PYSEC-2019-114.yaml" + }, { "type": "WEB", "url": "https://lists.apache.org/thread.html/c2a39c207421797f82823a8aff488dcd332d9544038307bf69a2ba9e@%3Cuser.spark.apache.org%3E" diff --git a/advisories/github-reviewed/2022/08/GHSA-mjvm-mhgc-q4gp/GHSA-mjvm-mhgc-q4gp.json b/advisories/github-reviewed/2022/08/GHSA-mjvm-mhgc-q4gp/GHSA-mjvm-mhgc-q4gp.json index 6910505e468..bc63cde721d 100644 --- a/advisories/github-reviewed/2022/08/GHSA-mjvm-mhgc-q4gp/GHSA-mjvm-mhgc-q4gp.json +++ b/advisories/github-reviewed/2022/08/GHSA-mjvm-mhgc-q4gp/GHSA-mjvm-mhgc-q4gp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mjvm-mhgc-q4gp", - "modified": "2022-08-26T19:23:16Z", + "modified": "2024-10-24T21:48:34Z", "published": "2022-08-18T19:18:25Z", "aliases": [ "CVE-2022-36008" @@ -18,7 +18,7 @@ { "package": { "ecosystem": "crates.io", - "name": "frontier" + "name": "fc-rpc" }, "ranges": [ { @@ -28,7 +28,7 @@ "introduced": "0" }, { - "last_affected": "0.1.0" + "last_affected": "1.0.0" } ] } diff --git a/advisories/github-reviewed/2023/07/GHSA-mrwq-x4v8-fh7p/GHSA-mrwq-x4v8-fh7p.json b/advisories/github-reviewed/2023/07/GHSA-mrwq-x4v8-fh7p/GHSA-mrwq-x4v8-fh7p.json index 8a6d344e06f..70b0c1ef81c 100644 --- a/advisories/github-reviewed/2023/07/GHSA-mrwq-x4v8-fh7p/GHSA-mrwq-x4v8-fh7p.json +++ b/advisories/github-reviewed/2023/07/GHSA-mrwq-x4v8-fh7p/GHSA-mrwq-x4v8-fh7p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mrwq-x4v8-fh7p", - "modified": "2024-03-28T13:28:17Z", + "modified": "2024-10-24T21:49:45Z", "published": "2023-07-19T15:30:26Z", "aliases": [ "CVE-2022-40896" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,13 +24,6 @@ "ecosystem": "PyPI", "name": "Pygments" }, - "ecosystem_specific": { - "affected_functions": [ - "pygments.lexers.templates.SqlJinjaLexer.analyse_text", - "pygments.lexers.smithy.SmithyLexer", - "pygments.lexers.configs.PropertiesLexer" - ] - }, "ranges": [ { "type": "ECOSYSTEM",