diff --git a/advisories/github-reviewed/2022/02/GHSA-64q9-f38h-9mwx/GHSA-64q9-f38h-9mwx.json b/advisories/github-reviewed/2022/02/GHSA-64q9-f38h-9mwx/GHSA-64q9-f38h-9mwx.json
index 96690f474ee..42d7be0d620 100644
--- a/advisories/github-reviewed/2022/02/GHSA-64q9-f38h-9mwx/GHSA-64q9-f38h-9mwx.json
+++ b/advisories/github-reviewed/2022/02/GHSA-64q9-f38h-9mwx/GHSA-64q9-f38h-9mwx.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-64q9-f38h-9mwx",
-  "modified": "2022-12-01T22:18:12Z",
+  "modified": "2023-10-27T16:46:22Z",
   "published": "2022-02-16T00:01:18Z",
   "aliases": [
     "CVE-2022-25204"
@@ -11,7 +11,7 @@
   "severity": [
     {
       "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
     }
   ],
   "affected": [
@@ -51,9 +51,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-693"
+
     ],
-    "severity": "LOW",
+    "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2022-02-24T17:31:28Z",
     "nvd_published_at": "2022-02-15T17:15:00Z"
diff --git a/advisories/github-reviewed/2022/02/GHSA-fq56-c7rj-j3j9/GHSA-fq56-c7rj-j3j9.json b/advisories/github-reviewed/2022/02/GHSA-fq56-c7rj-j3j9/GHSA-fq56-c7rj-j3j9.json
index 2c2fc7b044d..d52e56e87f1 100644
--- a/advisories/github-reviewed/2022/02/GHSA-fq56-c7rj-j3j9/GHSA-fq56-c7rj-j3j9.json
+++ b/advisories/github-reviewed/2022/02/GHSA-fq56-c7rj-j3j9/GHSA-fq56-c7rj-j3j9.json
@@ -1,17 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fq56-c7rj-j3j9",
-  "modified": "2022-12-01T22:13:28Z",
+  "modified": "2023-10-27T16:47:16Z",
   "published": "2022-02-16T00:01:15Z",
   "aliases": [
     "CVE-2022-25208"
   ],
   "summary": "Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE",
-  "details": "Chef Sinatra Plugin 1.20 and earlier does not perform a permission check in a method implementing form validation.\n\nThis allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse the response as XML.\n\nAs the plugin does not configure its XML parser to prevent XML external entity (XXE) attacks, attackers can have Jenkins parse a crafted XML response that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.\n\nAdditionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.",
+  "details": "Jenkins Chef Sinatra Plugin 1.20 and earlier does not perform a permission check in a method implementing form validation.\n\nThis allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse the response as XML.\n\nAs the plugin does not configure its XML parser to prevent XML external entity (XXE) attacks, attackers can have Jenkins parse a crafted XML response that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.\n\nAdditionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.",
   "severity": [
     {
       "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
     }
   ],
   "affected": [