diff --git a/advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json b/advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json
new file mode 100644
index 00000000000..e15eef7c36f
--- /dev/null
+++ b/advisories/github-reviewed/2024/11/GHSA-93ww-43rr-79v3/GHSA-93ww-43rr-79v3.json
@@ -0,0 +1,84 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-93ww-43rr-79v3",
+  "modified": "2024-11-25T19:40:46Z",
+  "published": "2024-11-25T19:40:46Z",
+  "aliases": [
+    "CVE-2024-10039"
+  ],
+  "summary": "Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination ",
+  "details": "A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication mechanism.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.keycloak:keycloak-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "< 24.0.9"
+      }
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.keycloak:keycloak-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "25.0.0"
+            },
+            {
+              "fixed": "26.0.6"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/keycloak/keycloak/issues/35217"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/keycloak/keycloak"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-295"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-25T19:40:46Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json b/advisories/github-reviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
similarity index 51%
rename from advisories/unreviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
rename to advisories/github-reviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
index 50b278183c5..ca2e9ca6617 100644
--- a/advisories/unreviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
+++ b/advisories/github-reviewed/2024/11/GHSA-qpgc-w4mg-6v92/GHSA-qpgc-w4mg-6v92.json
@@ -1,20 +1,43 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qpgc-w4mg-6v92",
-  "modified": "2024-11-25T18:33:26Z",
+  "modified": "2024-11-25T19:41:56Z",
   "published": "2024-11-25T18:33:26Z",
   "aliases": [
     "CVE-2024-27134"
   ],
+  "summary": "MLflow's excessive directory permissions allow local privilege escalation",
   "details": "Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "mlflow"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.16.0"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -24,6 +47,14 @@
     {
       "type": "WEB",
       "url": "https://github.com/mlflow/mlflow/pull/10874"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mlflow/mlflow/commit/0b1d995d66a678153e01ed3040f3f4dfc16a0d6b"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/mlflow/mlflow"
     }
   ],
   "database_specific": {
@@ -31,8 +62,8 @@
       "CWE-276"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-11-25T19:41:56Z",
     "nvd_published_at": "2024-11-25T14:15:06Z"
   }
 }
\ No newline at end of file