From f29b5de977268455e047807e1768c52e526cbe88 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sat, 22 Mar 2025 00:20:35 +0000 Subject: [PATCH] Publish Advisories GHSA-5xg7-5662-8x7j GHSA-89qx-m49c-8crf GHSA-5xg7-5662-8x7j --- .../GHSA-5xg7-5662-8x7j.json | 69 +++++++++++++++++++ .../GHSA-89qx-m49c-8crf.json | 33 +++++++-- .../GHSA-5xg7-5662-8x7j.json | 36 ---------- 3 files changed, 98 insertions(+), 40 deletions(-) create mode 100644 advisories/github-reviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json (61%) delete mode 100644 advisories/unreviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json diff --git a/advisories/github-reviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json b/advisories/github-reviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json new file mode 100644 index 00000000000..14c92a7d5d7 --- /dev/null +++ b/advisories/github-reviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json @@ -0,0 +1,69 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5xg7-5662-8x7j", + "modified": "2025-03-22T00:19:04Z", + "published": "2025-03-20T12:32:49Z", + "aliases": [ + "CVE-2024-8953" + ], + "summary": "Composio Eval Injection Vulnerability", + "details": "In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "composio-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.5.43" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8953" + }, + { + "type": "WEB", + "url": "https://github.com/ComposioHQ/composio/commit/ed82fb45dc9fbd7f07c535c72bada871c158ae5f" + }, + { + "type": "PACKAGE", + "url": "https://github.com/ComposioHQ/composio-js" + }, + { + "type": "WEB", + "url": "https://github.com/ComposioHQ/composio/blob/b932d99e67f0fe95f8a0a24be9352e3f99059bc3/python/composio/tools/local/mathematical/actions/calculator.py#L37" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-627" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-03-22T00:19:04Z", + "nvd_published_at": "2025-03-20T10:15:44Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json b/advisories/github-reviewed/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json similarity index 61% rename from advisories/unreviewed/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json rename to advisories/github-reviewed/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json index c479731060e..18be3facfc4 100644 --- a/advisories/unreviewed/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json +++ b/advisories/github-reviewed/2025/03/GHSA-89qx-m49c-8crf/GHSA-89qx-m49c-8crf.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-89qx-m49c-8crf", - "modified": "2025-03-20T12:32:42Z", + "modified": "2025-03-22T00:19:54Z", "published": "2025-03-20T12:32:42Z", "aliases": [ "CVE-2024-12055" ], + "summary": "Ollama Allows Out-of-Bounds Read", "details": "A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. When the server processes this malicious model, it crashes, leading to a Denial of Service (DoS) attack. The root cause of the issue is an out-of-bounds read in the gguf.go file.", "severity": [ { @@ -13,12 +14,36 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/ollama/ollama" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.3.14" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12055" }, + { + "type": "PACKAGE", + "url": "https://github.com/ollama/ollama" + }, { "type": "WEB", "url": "https://huntr.com/bounties/7b111d55-8215-4727-8807-c5ed4cf1bfbe" @@ -29,8 +54,8 @@ "CWE-125" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-22T00:19:54Z", "nvd_published_at": "2025-03-20T10:15:26Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json b/advisories/unreviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json deleted file mode 100644 index c0eb8c6621a..00000000000 --- a/advisories/unreviewed/2025/03/GHSA-5xg7-5662-8x7j/GHSA-5xg7-5662-8x7j.json +++ /dev/null @@ -1,36 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-5xg7-5662-8x7j", - "modified": "2025-03-20T12:32:49Z", - "published": "2025-03-20T12:32:49Z", - "aliases": [ - "CVE-2024-8953" - ], - "details": "In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8953" - }, - { - "type": "WEB", - "url": "https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-627" - ], - "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2025-03-20T10:15:44Z" - } -} \ No newline at end of file