diff --git a/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json b/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json index cc4200cf952..c71eff19292 100644 --- a/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json +++ b/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6c5p-j8vq-pqhj", - "modified": "2024-08-02T15:45:23Z", + "modified": "2024-09-03T21:53:28Z", "published": "2024-04-26T00:30:35Z", "aliases": [ "CVE-2024-33663" @@ -51,6 +51,10 @@ { "type": "PACKAGE", "url": "https://github.com/mpdavis/python-jose" + }, + { + "type": "WEB", + "url": "https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663" } ], "database_specific": { diff --git a/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json b/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json index 4c9a25fe13b..63b4cf5c7b0 100644 --- a/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json +++ b/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pv4p-cwwg-4rph", - "modified": "2024-08-07T19:02:40Z", + "modified": "2024-09-03T21:53:30Z", "published": "2024-08-07T15:30:42Z", "aliases": [ "CVE-2024-42005" @@ -83,6 +83,10 @@ "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-70.yaml" }, + { + "type": "WEB", + "url": "https://groups.google.com/forum/#%21forum/django-announce" + }, { "type": "WEB", "url": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases"