Publish Advisories

GHSA-cgcg-p68q-3w7v
GHSA-g5hv-r743-v8pm
GHSA-xrh7-2gfq-4rcq

advisories/github-reviewed/2024/07/GHSA-cgcg-p68q-3w7v/GHSA-cgcg-p68q-3w7v.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cgcg-p68q-3w7v",
-  "modified": "2024-07-15T16:26:46Z",
+  "modified": "2024-08-02T15:52:45Z",
   "published": "2024-07-15T06:30:53Z",
   "aliases": [
     "CVE-2024-21513"
@@ -56,6 +56,10 @@
       "type": "WEB",
       "url": "https://github.com/langchain-ai/langchain/blob/672907bbbb7c38bf19787b78e4ffd7c8a9026fe4/libs/experimental/langchain_experimental/sql/vector_sql.py#L81"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/langchain-ai/langchain/blob/672907bbbb7c38bf19787b78e4ffd7c8a9026fe4/libs/experimental/langchain_experimental/sql/vector_sql.py%23L81"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/langchain-experimental/PYSEC-2024-62.yaml"

advisories/github-reviewed/2024/07/GHSA-g5hv-r743-v8pm/GHSA-g5hv-r743-v8pm.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g5hv-r743-v8pm",
-  "modified": "2024-07-17T17:59:44Z",
+  "modified": "2024-08-02T15:52:52Z",
   "published": "2024-07-17T09:30:49Z",
   "aliases": [
     "CVE-2024-39877"
@@ -63,6 +63,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-277",
       "CWE-94"
     ],
     "severity": "HIGH",

advisories/github-reviewed/2024/07/GHSA-xrh7-2gfq-4rcq/GHSA-xrh7-2gfq-4rcq.json

@@ -55,7 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1336"
+      "CWE-1336",
+      "CWE-94"
     ],
     "severity": "HIGH",
     "github_reviewed": true,