diff --git a/advisories/unreviewed/2024/12/GHSA-6f5r-5mjv-2p43/GHSA-6f5r-5mjv-2p43.json b/advisories/unreviewed/2024/12/GHSA-6f5r-5mjv-2p43/GHSA-6f5r-5mjv-2p43.json
index 8d6463795fe..1d44b7cc32c 100644
--- a/advisories/unreviewed/2024/12/GHSA-6f5r-5mjv-2p43/GHSA-6f5r-5mjv-2p43.json
+++ b/advisories/unreviewed/2024/12/GHSA-6f5r-5mjv-2p43/GHSA-6f5r-5mjv-2p43.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6f5r-5mjv-2p43",
-  "modified": "2024-12-27T15:31:54Z",
+  "modified": "2025-01-09T00:31:33Z",
   "published": "2024-12-27T15:31:54Z",
   "aliases": [
     "CVE-2024-56588"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855]   ESR = 0x0000000096000004\n[67840.869713]   EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125]   SET = 0, FnV = 0\n[67840.878291]   EA = 0, S1PTW = 0\n[67840.881545]   FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456]  down_write+0x30/0x98\n[67841.096017]  start_creating.part.0+0x60/0x198\n[67841.100613]  debugfs_create_dir+0x48/0x1f8\n[67841.104950]  debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447]  debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111]  debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115]  full_proxy_write+0x68/0xc8\n[67841.129175]  vfs_write+0xd8/0x3f0\n[67841.132708]  ksys_write+0x70/0x108\n[67841.136317]  __arm64_sys_write+0x24/0x38\n[67841.140440]  invoke_syscall+0x50/0x128\n[67841.144385]  el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273]  do_el0_svc+0x24/0x38\n[67841.152773]  el0_svc+0x38/0xd8\n[67841.156009]  el0t_64_sync_handler+0xc0/0xc8\n[67841.160361]  el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:18Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-7437-h333-6p8j/GHSA-7437-h333-6p8j.json b/advisories/unreviewed/2024/12/GHSA-7437-h333-6p8j/GHSA-7437-h333-6p8j.json
index 0ecd619554c..90298ee2647 100644
--- a/advisories/unreviewed/2024/12/GHSA-7437-h333-6p8j/GHSA-7437-h333-6p8j.json
+++ b/advisories/unreviewed/2024/12/GHSA-7437-h333-6p8j/GHSA-7437-h333-6p8j.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7437-h333-6p8j",
-  "modified": "2024-12-27T15:31:55Z",
+  "modified": "2025-01-09T00:31:33Z",
   "published": "2024-12-27T15:31:55Z",
   "aliases": [
     "CVE-2024-56623"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread.  Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G          IOE    --------- -  - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022]  ? __dentry_kill+0x121/0x170\n[596663.813030]  ? _cond_resched+0x15/0x30\n[596663.813034]  ? _cond_resched+0x15/0x30\n[596663.813039]  ? wait_for_completion+0x35/0x190\n[596663.813048]  ? try_to_wake_up+0x63/0x540\n[596663.813055]  free_task+0x5a/0x60\n[596663.813061]  kthread_stop+0xf3/0x100\n[596663.813103]  qla2x00_remove_one+0x284/0x440 [qla2xxx]",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -40,8 +45,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:21Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-h88r-39vx-9655/GHSA-h88r-39vx-9655.json b/advisories/unreviewed/2024/12/GHSA-h88r-39vx-9655/GHSA-h88r-39vx-9655.json
index 85665082786..12b9fc1d347 100644
--- a/advisories/unreviewed/2024/12/GHSA-h88r-39vx-9655/GHSA-h88r-39vx-9655.json
+++ b/advisories/unreviewed/2024/12/GHSA-h88r-39vx-9655/GHSA-h88r-39vx-9655.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h88r-39vx-9655",
-  "modified": "2024-12-27T15:31:54Z",
+  "modified": "2025-01-09T00:31:33Z",
   "published": "2024-12-27T15:31:54Z",
   "aliases": [
     "CVE-2024-56599"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: avoid NULL pointer error during sdio remove\n\nWhen running 'rmmod ath10k', ath10k_sdio_remove() will free sdio\nworkqueue by destroy_workqueue(). But if CONFIG_INIT_ON_FREE_DEFAULT_ON\nis set to yes, kernel panic will happen:\nCall trace:\n destroy_workqueue+0x1c/0x258\n ath10k_sdio_remove+0x84/0x94\n sdio_bus_remove+0x50/0x16c\n device_release_driver_internal+0x188/0x25c\n device_driver_detach+0x20/0x2c\n\nThis is because during 'rmmod ath10k', ath10k_sdio_remove() will call\nath10k_core_destroy() before destroy_workqueue(). wiphy_dev_release()\nwill finally be called in ath10k_core_destroy(). This function will free\nstruct cfg80211_registered_device *rdev and all its members, including\nwiphy, dev and the pointer of sdio workqueue. Then the pointer of sdio\nworkqueue will be set to NULL due to CONFIG_INIT_ON_FREE_DEFAULT_ON.\n\nAfter device release, destroy_workqueue() will use NULL pointer then the\nkernel panic happen.\n\nCall trace:\nath10k_sdio_remove\n  ->ath10k_core_unregister\n    ……\n    ->ath10k_core_stop\n      ->ath10k_hif_stop\n        ->ath10k_sdio_irq_disable\n    ->ath10k_hif_power_down\n      ->del_timer_sync(&ar_sdio->sleep_timer)\n  ->ath10k_core_destroy\n    ->ath10k_mac_destroy\n      ->ieee80211_free_hw\n        ->wiphy_free\n    ……\n          ->wiphy_dev_release\n  ->destroy_workqueue\n\nNeed to call destroy_workqueue() before ath10k_core_destroy(), free\nthe work queue buffer first and then free pointer of work queue by\nath10k_core_destroy(). This order matches the error path order in\nath10k_sdio_probe().\n\nNo work will be queued on sdio workqueue between it is destroyed and\nath10k_core_destroy() is called. Based on the call_stack above, the\nreason is:\nOnly ath10k_sdio_sleep_timer_handler(), ath10k_sdio_hif_tx_sg() and\nath10k_sdio_irq_disable() will queue work on sdio workqueue.\nSleep timer will be deleted before ath10k_core_destroy() in\nath10k_hif_power_down().\nath10k_sdio_irq_disable() only be called in ath10k_hif_stop().\nath10k_core_unregister() will call ath10k_hif_power_down() to stop hif\nbus, so ath10k_sdio_hif_tx_sg() won't be called anymore.\n\nTested-on: QCA6174 hw3.2 SDIO WLAN.RMH.4.4.1-00189",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:19Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-jp72-5x8f-phqc/GHSA-jp72-5x8f-phqc.json b/advisories/unreviewed/2024/12/GHSA-jp72-5x8f-phqc/GHSA-jp72-5x8f-phqc.json
index 0562c7e0835..ac0552173d9 100644
--- a/advisories/unreviewed/2024/12/GHSA-jp72-5x8f-phqc/GHSA-jp72-5x8f-phqc.json
+++ b/advisories/unreviewed/2024/12/GHSA-jp72-5x8f-phqc/GHSA-jp72-5x8f-phqc.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jp72-5x8f-phqc",
-  "modified": "2024-12-27T15:31:55Z",
+  "modified": "2025-01-09T00:31:33Z",
   "published": "2024-12-27T15:31:55Z",
   "aliases": [
     "CVE-2024-56631"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(&sfp->f_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(&sfp->f_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n   decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n   sg_remove_sfp_usercontext() can safely execute without impacting the\n   mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:22Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-p4h8-c4rj-g3r9/GHSA-p4h8-c4rj-g3r9.json b/advisories/unreviewed/2024/12/GHSA-p4h8-c4rj-g3r9/GHSA-p4h8-c4rj-g3r9.json
index 607a982eed8..9b1197d051a 100644
--- a/advisories/unreviewed/2024/12/GHSA-p4h8-c4rj-g3r9/GHSA-p4h8-c4rj-g3r9.json
+++ b/advisories/unreviewed/2024/12/GHSA-p4h8-c4rj-g3r9/GHSA-p4h8-c4rj-g3r9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p4h8-c4rj-g3r9",
-  "modified": "2024-12-27T15:31:54Z",
+  "modified": "2025-01-09T00:31:33Z",
   "published": "2024-12-27T15:31:54Z",
   "aliases": [
     "CVE-2024-56606"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:20Z"
diff --git a/advisories/unreviewed/2024/12/GHSA-wp52-h62r-qwj4/GHSA-wp52-h62r-qwj4.json b/advisories/unreviewed/2024/12/GHSA-wp52-h62r-qwj4/GHSA-wp52-h62r-qwj4.json
index ff7537c99af..9636a606604 100644
--- a/advisories/unreviewed/2024/12/GHSA-wp52-h62r-qwj4/GHSA-wp52-h62r-qwj4.json
+++ b/advisories/unreviewed/2024/12/GHSA-wp52-h62r-qwj4/GHSA-wp52-h62r-qwj4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wp52-h62r-qwj4",
-  "modified": "2024-12-27T15:31:55Z",
+  "modified": "2025-01-09T00:31:33Z",
   "published": "2024-12-27T15:31:55Z",
   "aliases": [
     "CVE-2024-56642"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_net_stop() waits for such works to finish by checking\ntipc_net(net)->wq_count.  However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet's move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n     sk_alloc+0x438/0x608\n     inet_create+0x4c8/0xcb0\n     __sock_create+0x350/0x6b8\n     sock_create_kern+0x58/0x78\n     udp_sock_create4+0x68/0x398\n     udp_sock_create+0x88/0xc8\n     tipc_udp_enable+0x5e8/0x848\n     __tipc_nl_bearer_enable+0x84c/0xed8\n     tipc_nl_bearer_enable+0x38/0x60\n     genl_family_rcv_msg_doit+0x170/0x248\n     genl_rcv_msg+0x400/0x5b0\n     netlink_rcv_skb+0x1dc/0x398\n     genl_rcv+0x44/0x68\n     netlink_unicast+0x678/0x8b0\n     netlink_sendmsg+0x5e4/0x898\n     ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-12-27T15:15:23Z"
diff --git a/advisories/unreviewed/2025/01/GHSA-44mv-wwhg-qc59/GHSA-44mv-wwhg-qc59.json b/advisories/unreviewed/2025/01/GHSA-44mv-wwhg-qc59/GHSA-44mv-wwhg-qc59.json
new file mode 100644
index 00000000000..dddac2f91a3
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-44mv-wwhg-qc59/GHSA-44mv-wwhg-qc59.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-44mv-wwhg-qc59",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2024-5610"
+  ],
+  "details": "Rejected reason: loading template...",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5610"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-08T23:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-67q8-fvcw-pw54/GHSA-67q8-fvcw-pw54.json b/advisories/unreviewed/2025/01/GHSA-67q8-fvcw-pw54/GHSA-67q8-fvcw-pw54.json
new file mode 100644
index 00000000000..b53c7efcf8f
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-67q8-fvcw-pw54/GHSA-67q8-fvcw-pw54.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-67q8-fvcw-pw54",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2024-13195"
+  ],
+  "details": "A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13195"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/donglight/bookstore/issues/11"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/donglight/bookstore/issues/11#issue-2760929273"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290787"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290787"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469689"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-918"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-09T00:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-6qrj-w5gh-5jrc/GHSA-6qrj-w5gh-5jrc.json b/advisories/unreviewed/2025/01/GHSA-6qrj-w5gh-5jrc/GHSA-6qrj-w5gh-5jrc.json
new file mode 100644
index 00000000000..0e85958e998
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-6qrj-w5gh-5jrc/GHSA-6qrj-w5gh-5jrc.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6qrj-w5gh-5jrc",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2024-13192"
+  ],
+  "details": "A vulnerability, which was classified as problematic, was found in ZeroWdd myblog 1.0. Affected is the function update of the file src/main/java/com/wdd/myblog/controller/admin/BlogController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13192"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ZeroWdd/myblog/issues/4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ZeroWdd/myblog/issues/4#issue-2759845658"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290784"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290784"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469232"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-08T23:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-7cmg-qwmj-9qjf/GHSA-7cmg-qwmj-9qjf.json b/advisories/unreviewed/2025/01/GHSA-7cmg-qwmj-9qjf/GHSA-7cmg-qwmj-9qjf.json
new file mode 100644
index 00000000000..48a29e06970
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-7cmg-qwmj-9qjf/GHSA-7cmg-qwmj-9qjf.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7cmg-qwmj-9qjf",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2024-13194"
+  ],
+  "details": "A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/admin_members.php?ac=search. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13194"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Upgradeextension/Sucms-v1.0SQLinjection/blob/main/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290786"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290786"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469566"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-09T00:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-7wq5-4fqc-5x7h/GHSA-7wq5-4fqc-5x7h.json b/advisories/unreviewed/2025/01/GHSA-7wq5-4fqc-5x7h/GHSA-7wq5-4fqc-5x7h.json
new file mode 100644
index 00000000000..2b588356f97
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-7wq5-4fqc-5x7h/GHSA-7wq5-4fqc-5x7h.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7wq5-4fqc-5x7h",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2024-13196"
+  ],
+  "details": "A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13196"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/donglight/bookstore/issues/12"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/donglight/bookstore/issues/12#issue-2760934170"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290788"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290788"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469771"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-09T00:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-gvjr-j39g-95q4/GHSA-gvjr-j39g-95q4.json b/advisories/unreviewed/2025/01/GHSA-gvjr-j39g-95q4/GHSA-gvjr-j39g-95q4.json
new file mode 100644
index 00000000000..b87c9542e69
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-gvjr-j39g-95q4/GHSA-gvjr-j39g-95q4.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gvjr-j39g-95q4",
+  "modified": "2025-01-09T00:31:35Z",
+  "published": "2025-01-09T00:31:35Z",
+  "aliases": [
+    "CVE-2024-13197"
+  ],
+  "details": "A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13197"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/donglight/bookstore/issues/13"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/donglight/bookstore/issues/13#issue-2760943787"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290789"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290789"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469772"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-09T00:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-h7v2-wf2g-v4cf/GHSA-h7v2-wf2g-v4cf.json b/advisories/unreviewed/2025/01/GHSA-h7v2-wf2g-v4cf/GHSA-h7v2-wf2g-v4cf.json
new file mode 100644
index 00000000000..0cdd9857099
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-h7v2-wf2g-v4cf/GHSA-h7v2-wf2g-v4cf.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h7v2-wf2g-v4cf",
+  "modified": "2025-01-09T00:31:33Z",
+  "published": "2025-01-09T00:31:33Z",
+  "aliases": [
+    "CVE-2024-13191"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13191"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ZeroWdd/myblog/issues/3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ZeroWdd/myblog/issues/3#issue-2759839215"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290783"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290783"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469229"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-08T23:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-j5g5-c424-7xqg/GHSA-j5g5-c424-7xqg.json b/advisories/unreviewed/2025/01/GHSA-j5g5-c424-7xqg/GHSA-j5g5-c424-7xqg.json
new file mode 100644
index 00000000000..69bb9c2fba1
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-j5g5-c424-7xqg/GHSA-j5g5-c424-7xqg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j5g5-c424-7xqg",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2025-0283"
+  ],
+  "details": "A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0283"
+    },
+    {
+      "type": "WEB",
+      "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-08T23:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-rf94-f4r9-6gxh/GHSA-rf94-f4r9-6gxh.json b/advisories/unreviewed/2025/01/GHSA-rf94-f4r9-6gxh/GHSA-rf94-f4r9-6gxh.json
new file mode 100644
index 00000000000..1d546838165
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-rf94-f4r9-6gxh/GHSA-rf94-f4r9-6gxh.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rf94-f4r9-6gxh",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2025-0282"
+  ],
+  "details": "A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0282"
+    },
+    {
+      "type": "WEB",
+      "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-08T23:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-wv44-3j27-fqq2/GHSA-wv44-3j27-fqq2.json b/advisories/unreviewed/2025/01/GHSA-wv44-3j27-fqq2/GHSA-wv44-3j27-fqq2.json
new file mode 100644
index 00000000000..068a3799775
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-wv44-3j27-fqq2/GHSA-wv44-3j27-fqq2.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wv44-3j27-fqq2",
+  "modified": "2025-01-09T00:31:34Z",
+  "published": "2025-01-09T00:31:34Z",
+  "aliases": [
+    "CVE-2024-13193"
+  ],
+  "details": "A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13193"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Upgradeextension/SEMCMS/blob/main/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.290785"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.290785"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.469563"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-08T23:15:09Z"
+  }
+}
\ No newline at end of file